Security Analyst (SOC)
for section headings, - for lists,
for prose. Don't repeat job title as heading. Don't include Job ID as heading. Remove boilerplate (EEO, privacy policy, application instructions, etc.). Only include sections with real content.
Let me map the content:
- "Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment." - this is location/schedule info, could go in a Schedule or Location section, but the rules say only include Pay/Schedule/Benefits if posting actually states them. It mentions flexible environment and rotating days including weekends/holidays. That's schedule info.
- "About Gartner Information Security" - prose, could be an "About the Team" or "About the Organization" section.
- "About The Role" - prose description.
- "What You Will Do" - list of responsibilities.
- "What You Will Bring" - list of requirements.
- "Training and Certifications" - qualifications.
- "What You Will Love About Working Here" - benefits/culture.
- "What you will get:" - benefits list.
- "Who are we?" - company description.
- "What makes Gartner a great place to work?" - culture.
- "Gartner is the world authority on AI" - AI focus.
- "What do we offer?" - benefits/pay summary.
- Pay range: "A reasonable estimate of the base salary range for this role is 64,000 USD - 87,000 USD." plus bonus info.
- Schedule: "Gartner’s SOC operates 24x7... This role requires the flexibility to work on rotating days, including weekends and holidays..."
- Benefits: extensive list in "What you will get" and "What do we offer?"
I should consolidate overlapping sections. For example, "What You Will Love About Working Here" and "What you will get" and "What do we offer?" all cover benefits/culture. I'll combine into a Benefits section.
Also "Who are we?", "What makes Gartner a great place to work?", "Gartner is the world authority on AI" are company background. Could be an "About Gartner" section.
The rules: "Prefer a few substantive sections over many thin ones." So I'll group related content.
Let me plan sections:
1. About the Team (from "About Gartner Information Security")
2. About the Role (from "About The Role")
3. Responsibilities (from "What You Will Do")
4. Requirements (from "What You Will Bring")
5. Qualifications (from "Training and Certifications")
6. Benefits (combine "What You Will Love About Working Here", "What you will get", "What do we offer?")
7. About Gartner (combine "Who are we?", "What makes Gartner a great place to work?", "Gartner is the world authority on AI")
8. Pay (salary range and bonus info)
9. Schedule (24x7, rotating days, weekends, holidays, flexible environment)
Location: "Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment." Could be part of Schedule or a Location note. Since it's not a full section, maybe include in Schedule or as a short paragraph.
The rules: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." So drop Job Requisition ID.
Remove EEO, privacy policy, application instructions.
Now, write HTML.
I'll start with
About the Team
then for the prose.
Then
About the Role
.
Then
Responsibilities
- for each bullet.
Then
Requirements
- .
Then
Qualifications
- (Training and Certifications).
Then
Benefits
- combining all benefits.
Then
About Gartner
for company description.
Then
Pay
for salary range and bonus.
Then
Schedule
for 24x7, rotating shifts, flexible environment.
Make sure to preserve all substantive information, not summarize away detail.
Let me extract the bullet points exactly.
From "What You Will Do":
- Investigate security events: Triage and investigate security events and incidents from initial review through containment, remediation and closure, escalating complex or high-impact issues when needed.
- Analyze evidence: Correlate information across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to understand activity, scope and appropriate response actions.
- Communicate clearly: Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders.
- Improve detection and response: Contribute to detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks.
- Build and automate: Help develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness.
- Hunt proactively: Identify suspicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments.
- Collaborate effectively: Work with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations.
- Support continuous improvement: Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC.
From "What You Will Bring":
- Relevant experience: Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role.
- Investigation capability: Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive operational environment.
- Technical foundation: Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation and detection development.
- Security tooling: Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR and email security tools.
- Cloud and data skills: Exposure to AWS, Azure or GCP environments and the ability to query data using SPL, SQL, KQL or comparable languages.
- Automation mindset: Interest in automating repetitive work with Python, PowerShell, Bash or similar technologies.
- Communication and collaboration: Clear communication, sound prioritization, and the ability to work proactively with teammates and stakeholders.
- Growth mindset: Curiosity, continuous learning and an improvement-focused approach to tools, processes and team outcomes.
From "Training and Certifications":
- A bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience is preferred.
- Certifications such as GCIH, GCFA, or comparable credentials are advantageous.
From "What You Will Love About Working Here":
- Visible impact: Help strengthen the maturity of a global SOC while protecting a business that operates on a worldwide scale.
- Meaningful ownership: Take responsibility for important investigations, influence outcomes and see strong ideas move from concept to implementation.
- Modern security challenges: Work across diverse technologies and environments, supported by tools and investment that enable you to do your best work.
- Growth through collaboration: Learn with skilled colleagues who value curiosity, knowledge sharing, thoughtful challenges, and continuous improvement.
- Autonomy with support: Have the freedom to improve how we work, backed by a global team committed to shared success.
From "What you will get:" (list):
- Competitive compensation.
- Limitless growth and learning opportunities.
- Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more!
- A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you.
- A chance to make an impact – your work will contribute directly to our strategy.
- Enjoy the flexibility of working from home and the energy of collaborating with peers in our dynamic offices.
- 20+ PTO days plus holidays and floating holidays in your first year.
- Extensive medical, dental insurance and vision plan.
- 401K with corporate match, immediate vesting.
- Health-and-wellness-related allowance programs.
- Parental leave.
- Tuition reimbursement.
- Employee Stock Purchase Plan.
- Employee Assistance Program.
- Gartner Gives Charity Match.
- And much more!
From "What do we offer?" (some overlap):
- Gartner offers world-class benefits, highly competitive compensation and disproportionate rewards for top performers.
- In our hybrid work environment, we provide the flexibility and support for you to thrive — working virtually when it's productive to do so and getting together with colleagues in a vibrant community that is purposeful, engaging and inspiring.
- (Also mentions benefits again)
I'll combine into one Benefits list, removing duplicates.
From "Who are we?":
- At Gartner, Inc. (NYSE:IT), we guide the leaders who shape the world. Our mission relies on expert analysis and bold ideas to deliver actionable, objective business and technology insights, helping enterprise leaders and their teams succeed with their mission-critical priorities. Since our founding in 1979, we’ve grown to 20,000 associates globally who support over 13,000 client enterprises in ~90 countries and territories. We do important, interesting and substantive work that matters. That’s why we hire associates with the intellectual curiosity, energy and drive to want to make a difference. The bar is unapologetically high. So is the impact you can have here.
From "What makes Gartner a great place to work?":
- Our vast, virtually untapped market potential offers limitless opportunities – opportunities that may not even exist right now – for you to grow professionally and flourish personally. How far you go is driven by your passion and performance. We hire remarkable people who collaborate and win as a team. Together, our singular, unifying goal is to deliver results for our clients. Our teams are inclusive and composed of individuals from different geographies, cultures, religions, ethnicities, races, genders, sexual orientations, abilities and generations. We invest in great leaders who bring out the best in you and the company, enabling us to multiply our impact and results. This is why, year after year, we are recognized worldwide as a great place to work.
From "Gartner is the world authority on AI":
- At Gartner, you’ll join a company at the very center of the AI revolution. Gartner has proactive, objective guidance throughout clients’ AI journeys. We set the standard for how organizations leverage artificial intelligence to drive meaningful impact. You’ll have access to unmatched resources, expertise, and technology, and play a key role in helping Gartner and our clients innovate and grow as we leverage AI to transform business and technology landscapes. It’s an exciting time to be at Gartner, with limitless opportunities to make a real impact, grow your skills, and build a lasting, meaningful career in a field that’s reshaping the way we operate. If you’re passionate about AI and want to be part of a team that’s guiding the leaders who shape
for prose. Don't repeat job title as heading. Don't include Job ID as heading. Remove boilerplate (EEO, privacy policy, application instructions, etc.). Only include sections with real content. Let me map the content: - "Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment." - this is location/schedule info, could go in a Schedule or Location section, but the rules say only include Pay/Schedule/Benefits if posting actually states them. It mentions flexible environment and rotating days including weekends/holidays. That's schedule info. - "About Gartner Information Security" - prose, could be an "About the Team" or "About the Organization" section. - "About The Role" - prose description. - "What You Will Do" - list of responsibilities. - "What You Will Bring" - list of requirements. - "Training and Certifications" - qualifications. - "What You Will Love About Working Here" - benefits/culture. - "What you will get:" - benefits list. - "Who are we?" - company description. - "What makes Gartner a great place to work?" - culture. - "Gartner is the world authority on AI" - AI focus. - "What do we offer?" - benefits/pay summary. - Pay range: "A reasonable estimate of the base salary range for this role is 64,000 USD - 87,000 USD." plus bonus info. - Schedule: "Gartner’s SOC operates 24x7... This role requires the flexibility to work on rotating days, including weekends and holidays..." - Benefits: extensive list in "What you will get" and "What do we offer?" I should consolidate overlapping sections. For example, "What You Will Love About Working Here" and "What you will get" and "What do we offer?" all cover benefits/culture. I'll combine into a Benefits section. Also "Who are we?", "What makes Gartner a great place to work?", "Gartner is the world authority on AI" are company background. Could be an "About Gartner" section. The rules: "Prefer a few substantive sections over many thin ones." So I'll group related content. Let me plan sections: 1. About the Team (from "About Gartner Information Security") 2. About the Role (from "About The Role") 3. Responsibilities (from "What You Will Do") 4. Requirements (from "What You Will Bring") 5. Qualifications (from "Training and Certifications") 6. Benefits (combine "What You Will Love About Working Here", "What you will get", "What do we offer?") 7. About Gartner (combine "Who are we?", "What makes Gartner a great place to work?", "Gartner is the world authority on AI") 8. Pay (salary range and bonus info) 9. Schedule (24x7, rotating days, weekends, holidays, flexible environment) Location: "Hiring near our Irving, TX and Stamford, CT Centers of Excellence with a flexible environment." Could be part of Schedule or a Location note. Since it's not a full section, maybe include in Schedule or as a short paragraph. The rules: "Do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." So drop Job Requisition ID. Remove EEO, privacy policy, application instructions. Now, write HTML. I'll start with
About the Team
thenfor the prose. Then
About the Role
. Then
Responsibilities
- for each bullet.
Then
Requirements
- .
Then
Qualifications
- (Training and Certifications).
Then
Benefits
- combining all benefits.
Then
About Gartner
for company description. Then
Pay
for salary range and bonus. Then
Schedule
for 24x7, rotating shifts, flexible environment. Make sure to preserve all substantive information, not summarize away detail. Let me extract the bullet points exactly. From "What You Will Do": - Investigate security events: Triage and investigate security events and incidents from initial review through containment, remediation and closure, escalating complex or high-impact issues when needed. - Analyze evidence: Correlate information across SIEM, EDR, cloud, email, proxy, network and supporting telemetry to understand activity, scope and appropriate response actions. - Communicate clearly: Document investigation notes, summarize findings, and share actionable outcomes with technical teams and business stakeholders. - Improve detection and response: Contribute to detection content, investigative workflows and playbooks aligned with MITRE ATT&CK, the Cyber Kill Chain and other relevant frameworks. - Build and automate: Help develop practical tools and automation that reduce repetitive work, accelerate investigations, and improve SOC effectiveness. - Hunt proactively: Identify suspicious behavior, vulnerabilities, control gaps, misconfigurations and anomalous activity across endpoint, network and cloud environments. - Collaborate effectively: Work with colleagues across multiple geographies to deliver coordinated, timely outcomes and support consistent global operations. - Support continuous improvement: Contribute practical ideas that improve processes, demonstrate operational excellence, and advance the maturity of the global SOC. From "What You Will Bring": - Relevant experience: Typically, at least two years of experience in information security, security operations, incident response, or an equivalent hands-on role. - Investigation capability: Experience triaging and investigating cybersecurity events and incidents, prioritizing effectively and working confidently in a time-sensitive operational environment. - Technical foundation: Hands-on experience using SIEM or XDR platforms for log analysis, alert investigation and detection development. - Security tooling: Working knowledge of technologies such as EDR, web proxy, WAF, CSPM, IDS/NDR and email security tools. - Cloud and data skills: Exposure to AWS, Azure or GCP environments and the ability to query data using SPL, SQL, KQL or comparable languages. - Automation mindset: Interest in automating repetitive work with Python, PowerShell, Bash or similar technologies. - Communication and collaboration: Clear communication, sound prioritization, and the ability to work proactively with teammates and stakeholders. - Growth mindset: Curiosity, continuous learning and an improvement-focused approach to tools, processes and team outcomes. From "Training and Certifications": - A bachelor’s degree in cybersecurity, computer science, engineering or equivalent practical experience is preferred. - Certifications such as GCIH, GCFA, or comparable credentials are advantageous. From "What You Will Love About Working Here": - Visible impact: Help strengthen the maturity of a global SOC while protecting a business that operates on a worldwide scale. - Meaningful ownership: Take responsibility for important investigations, influence outcomes and see strong ideas move from concept to implementation. - Modern security challenges: Work across diverse technologies and environments, supported by tools and investment that enable you to do your best work. - Growth through collaboration: Learn with skilled colleagues who value curiosity, knowledge sharing, thoughtful challenges, and continuous improvement. - Autonomy with support: Have the freedom to improve how we work, backed by a global team committed to shared success. From "What you will get:" (list): - Competitive compensation. - Limitless growth and learning opportunities. - Ongoing mentorship and apprenticeship; Leadership courses, development programs, technical courses, certification opportunities and more! - A collaborative and positive culture - join a diverse team of professionals that are as smart and driven as you. - A chance to make an impact – your work will contribute directly to our strategy. - Enjoy the flexibility of working from home and the energy of collaborating with peers in our dynamic offices. - 20+ PTO days plus holidays and floating holidays in your first year. - Extensive medical, dental insurance and vision plan. - 401K with corporate match, immediate vesting. - Health-and-wellness-related allowance programs. - Parental leave. - Tuition reimbursement. - Employee Stock Purchase Plan. - Employee Assistance Program. - Gartner Gives Charity Match. - And much more! From "What do we offer?" (some overlap): - Gartner offers world-class benefits, highly competitive compensation and disproportionate rewards for top performers. - In our hybrid work environment, we provide the flexibility and support for you to thrive — working virtually when it's productive to do so and getting together with colleagues in a vibrant community that is purposeful, engaging and inspiring. - (Also mentions benefits again) I'll combine into one Benefits list, removing duplicates. From "Who are we?": - At Gartner, Inc. (NYSE:IT), we guide the leaders who shape the world. Our mission relies on expert analysis and bold ideas to deliver actionable, objective business and technology insights, helping enterprise leaders and their teams succeed with their mission-critical priorities. Since our founding in 1979, we’ve grown to 20,000 associates globally who support over 13,000 client enterprises in ~90 countries and territories. We do important, interesting and substantive work that matters. That’s why we hire associates with the intellectual curiosity, energy and drive to want to make a difference. The bar is unapologetically high. So is the impact you can have here. From "What makes Gartner a great place to work?": - Our vast, virtually untapped market potential offers limitless opportunities – opportunities that may not even exist right now – for you to grow professionally and flourish personally. How far you go is driven by your passion and performance. We hire remarkable people who collaborate and win as a team. Together, our singular, unifying goal is to deliver results for our clients. Our teams are inclusive and composed of individuals from different geographies, cultures, religions, ethnicities, races, genders, sexual orientations, abilities and generations. We invest in great leaders who bring out the best in you and the company, enabling us to multiply our impact and results. This is why, year after year, we are recognized worldwide as a great place to work. From "Gartner is the world authority on AI": - At Gartner, you’ll join a company at the very center of the AI revolution. Gartner has proactive, objective guidance throughout clients’ AI journeys. We set the standard for how organizations leverage artificial intelligence to drive meaningful impact. You’ll have access to unmatched resources, expertise, and technology, and play a key role in helping Gartner and our clients innovate and grow as we leverage AI to transform business and technology landscapes. It’s an exciting time to be at Gartner, with limitless opportunities to make a real impact, grow your skills, and build a lasting, meaningful career in a field that’s reshaping the way we operate. If you’re passionate about AI and want to be part of a team that’s guiding the leaders who shape
- combining all benefits.
Then
- (Training and Certifications).
Then
- .
Then