1

Jr Soc Analyst Jobs in Oregon (NOW HIRING)

Senior Cybersecurity Analyst

Portland, OR ยท On-site +1

$94K - $126K/yr

The Senior Cybersecurity Analyst is the primary technical lead for Metro's security operations ... SOC/MSSP providers. * Develop, tune, and optimize detection content across SIEM, EDR, identity ...

Senior Cyber Threat Analyst

$99K - $128K/yr

Collaborate with cross-functional teams, including SOC (Security Operations Center) analysts, incident responders, and threat intelligence analysts, to prioritize and investigate potential threats.

Cyber Security Analyst

OR ยท On-site +1

Backed by a 24/7 SOC and expert threat researchers, DataDome stops 20k+ attacks every second. With ... Analyzing huge web traffic data sets (across more than 100 billions documents) to identify and ...

Cyber Security Analyst

OR ยท On-site +1

Citizen or Permanent Resident required with the ability to obtain a Public Trust LTS is seeking a Cyber Security Analyst to support the Department of Veterans Affairs (VA) Health Portfolio. The ...

Junior Property Compliance Analyst

Portland, OR ยท On-site +1

$53K - $71K/yr

Position Summary Under close supervision, the Junior Property Compliance Analyst will complete a variety of assignments related to tenant file compliance with Section 42, with a specific focus on 24 ...

next page

Showing results 1-20

Jr Soc Analyst information

See Oregon salary details

$16

$33

$56

How much do jr soc analyst jobs pay per hour?

As of Aug 19, 2026, the average hourly pay for jr soc analyst in Oregon is $33.96, according to ZipRecruiter salary data. Most workers in this role earn between $24.38 and $37.36 per hour, depending on experience, location, and employer.

What is a Jr SOC Analyst?

Jr SOC Analysts, or Junior Security Operations Center Analysts, are entry-level cybersecurity professionals who monitor and respond to security incidents within an organization. They assist in detecting threats, analyzing suspicious activities, and escalating issues to senior analysts as needed. Their work helps protect company data and IT infrastructure from cyberattacks and vulnerabilities. Jr SOC Analysts often use specialized tools to monitor network traffic and logs, and they may also contribute to incident documentation and reporting.

What are the key skills and qualifications needed to thrive as a Jr SOC Analyst?

To thrive as a Jr SOC Analyst, you need foundational knowledge of cybersecurity principles, incident response, and familiarity with security frameworks, often backed by a degree in IT or cybersecurity. Proficiency with Security Information and Event Management (SIEM) tools, intrusion detection/prevention systems (IDS/IPS), and certifications like CompTIA Security+ are typically required. Strong analytical thinking, attention to detail, and effective communication help you excel in identifying and escalating potential threats. These skills ensure timely detection and mitigation of security incidents, protecting organizational assets and data integrity.

What are some common challenges faced by Jr SOC Analysts during incident investigations?

Junior SOC Analysts often encounter challenges such as distinguishing between false positives and genuine threats, managing multiple security alerts simultaneously, and quickly adapting to new attack techniques. Working in a Security Operations Center is typically fast-paced, requiring analysts to prioritize effectively and communicate findings clearly with other team members. Overcoming these challenges helps build technical expertise and prepares analysts for more advanced roles within cybersecurity.

What is the difference between Jr Soc Analyst vs Soc Analyst?

AspectJr Soc AnalystSoc Analyst
Required CredentialsBachelor's degree in social sciences, related certificationsBachelor's or master's degree, more experience
Work EnvironmentEntry-level, team-based projects, research-focusedMore independent, complex analysis, strategic roles
Employer & Industry UsageGovernment agencies, research firms, NGOsCorporations, security firms, government agencies

The main difference between a Jr Soc Analyst and a Soc Analyst lies in experience and responsibility. Jr Soc Analysts typically handle entry-level research and data collection, while Soc Analysts perform more advanced analysis and strategic planning. Both roles require similar educational backgrounds, but Soc Analysts usually have more experience and a deeper understanding of social phenomena.

How to become a Jr Soc Analyst with no experience?

To become a Jr Soc Analyst with no experience, focus on gaining foundational knowledge of cybersecurity principles, network security, and threat analysis through online courses or certifications like CompTIA Security+ or Cisco's CCNA. Developing skills in security tools, monitoring, and incident response, along with entry-level internships or volunteer work, can improve your chances of entering the field.

Is Jr Soc Analyst still in demand?

The Jr Soc Analyst role remains in demand as organizations seek entry-level professionals skilled in social media monitoring, data analysis, and cybersecurity tools. The position often requires knowledge of social media platforms, analytics software, and security protocols, making it a relevant entry point in the cybersecurity and social media analysis fields.

Is a Jr Soc Analyst an entry-level job?

A Jr Soc Analyst is typically considered an entry-level position in social media analysis or cybersecurity, often requiring basic skills in data collection, monitoring tools, and reporting. It is suitable for candidates with limited professional experience and may serve as a starting point for a career in social analysis or cybersecurity analysis.

What job categories do people searching Jr Soc Analyst jobs in Oregon look for?

The top searched job categories for Jr Soc Analyst jobs in Oregon are:

What cities in Oregon are hiring for Jr Soc Analyst jobs?

Cities in Oregon with the most Jr Soc Analyst job openings:

Infographic showing various Jr Soc Analyst job openings in Oregon as of August 2026, with employment types broken down into 85% Full Time, 10% Part Time, and 5% Contract. Highlights an 80% Physical, 9% Hybrid, and 11% Remote job distribution, with an average salary of $70,629 per year, or $34 per hour.

Senior Cybersecurity Analyst

Oregon Metro

Portland, OR โ€ข On-site, Remote

$94K - $126K/yr

Full-time

Posted 7 days ago


Job description

Salary: $94,106.41 - $126,142.16 Annually
Location : Metro Regional Center, OR
Job Type: Full Time
Remote Employment: Flexible/Hybrid
Job Number: 2026-0070-IT
Department: Information Services
Opening Date: 08/13/2026
Closing Date: 8/23/2026 11:59 PM Pacific
Position Summary
Hello, we're Metro! Metro is dedicated to shaping a better future for the greater Portland region. The work the people of Metro do every day benefits the lives of the people who live here, today, and tomorrow.
The Information Security Team is looking for a Senior Cybersecurity Analyst to lead technical security operations, detection engineering, and incident response for Metro, protecting the systems, data, and services that people across the greater Portland region rely on every day.
The Senior Cybersecurity Analyst is the primary technical lead for Metro's security operations, detection engineering, and technical control execution, leading hands-on threat detection, incident response, and continuous improvement of Metro's security posture across endpoint, identity, cloud, and network environments.
This role serves as a senior technical control operator for compliance frameworks (NIST CSF, CIS Controls, PCI DSS) in partnership with the Information Security Compliance Analyst, who leads control definition and governance, and acts as the technical incident lead during security events, with formal incident declaration owned by the CISO. As Metro's Information Security program matures, this position offers a clear growth path toward a future Principal Cybersecurity Analyst role with broader ownership of security architecture, detection strategy, and technical risk leadership.
As the Senior Cybersecurity Analyst you will
  • Serve as the CISO's primary technical lead for security operations, leading alert review, validation, escalation, and coordinated response for security events across Metro's environment.
  • Act as technical incident lead during security events, coordinating containment, eradication, recovery, and post-incident follow-up in partnership with the CISO, IT teams, and SOC/MSSP providers.
  • Develop, tune, and optimize detection content across SIEM, EDR, identity, cloud, and network security tools, incorporating threat intelligence and MITRE ATT&CK techniques.
  • Operate and improve vulnerability management processes, providing risk-based prioritization and partnering with the Compliance Analyst on remediation tracking and risk acceptance documentation.
  • Implement, configure, and monitor technical safeguards under NIST CSF, CIS Controls, and PCI DSS, generating evidence to support compliance validation and audit activities.
  • Own technical security review and ongoing oversight of third-party services, SaaS platforms, and vendor integrations, evaluating authentication, data flows, and integration risk.
  • Monitor Metro's identity security posture, tune identity threat detection tooling, and investigate identity-based threats such as credential theft and lateral movement.
  • Maintain secure configuration baselines using CIS Benchmarks, administer Metro's EDR platform, and participate in security architecture and design reviews for cloud and infrastructure changes.
  • Implement and operate data protection controls (DLP, data monitoring, and audit capabilities), investigating alerts and partnering with the Compliance Analyst to align technical enforcement with policy intent.
  • Contribute technical content to security standards and training materials, and identify opportunities to improve detection quality, control effectiveness, and operational efficiency.

Attributes for success
  • Technically curious with a strong drive to learn, improve, and expand security capabilities across endpoint, identity, cloud, and network domains.
  • Detail-oriented with strong analytical skills and a disciplined approach to detection engineering, evidence collection, and documentation.
  • Comfortable leading technical incident response under pressure, exercising sound judgment about when to escalate versus resolve.
  • Strong working knowledge of security frameworks (NIST CSF, CIS Controls, PCI DSS) with the ability to translate requirements into practical technical controls.
  • Collaborative mindset with the ability to partner effectively with the Compliance Analyst, IT Infrastructure, Applications teams, Metro departments and business partners, and third-party SOC/MSSP providers.
  • Able to work independently on assigned technical priorities while communicating clearly with both technical and non-technical stakeholders.
  • Comfortable with ambiguity and program-building, given that tooling, processes, and governance structures are still actively maturing.
  • Reliable and responsive as a technical escalation point for high-severity or time-sensitive security events.
  • Growth-oriented, with the interest and capability to progress toward broader ownership of security architecture, detection strategy, and technical risk leadership.
  • Genuine interest in continuous learning and staying current on evolving threats, tooling, and best practices in a public-sector context.

DIVERSITY AND INCLUSION
At Metro, we strive to cultivate diversity, advance equity, and practice inclusion in all of its work. This means attracting and empowering a workforce that is inclusive of a broad range of human qualities. Workplace diversity is both a moral imperative and a business strength, essential to providing quality support and services to our region. Metro's goal is to hire, develop and retain highly skilled and talented individuals across all departments and programs who best reflect the diversity of our community.
TO QUALIFY
We will consider any combination of relevant work experience, volunteering, education, and transferable skills as qualifying unless an item or section is labeled required. Please be clear and specific in your application materials on how your background is relevant.
Minimum qualifications
  • 4-6 years of related professional experience in cybersecurity, security operations, detection engineering, incident response, vulnerability management, identity and access management, network security, cloud security, or a related technical field.
  • Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education, certification, and related professional experience.
  • Any combination of education, professional, volunteer and lived experience that provides the necessary knowledge, skills, and abilities to perform the classification duties and responsibilities.

If this statement is true for you, then you may be ineligible to apply
If you were terminated for cause during any employment with Metro, or resigned in lieu of termination, you may be ineligible for rehire for a minimum of 3 years.
Hybrid Telework
This position is designated as "hybrid telework." You will be required to work onsite and at times have the option to work away from your assigned work location. The specific schedule and balance of onsite and telework will be discussed with the hiring manager at the time of offer. This position also requires off-hours response to security events, incidents, or urgent operational needs, which may include remote response and onsite response when necessary. Employees must reside in Oregon or Washington to work at Metro. Please note, the designation of hybrid telework may be subject to change at a future time.
Like to have qualifications
You do not need to have the following preferred qualifications/transferable skills to qualify. However, keep in mind we may consider them when identifying the most qualified candidates. Your transferable skills are any skills you have gained through education, work experience, including the military, or life experience that are relevant for this position.
  • Demonstrated experience with technical control implementation, endpoint protection, identity security, network security, cloud security, logging, monitoring, or compliance-related safeguards.
  • Working knowledge of cybersecurity frameworks and control practices, including NIST CSF, CIS Controls, PCI DSS, or similar risk-based security frameworks.
  • Strong written and verbal communication skills, including the ability to document findings, procedures, and technical recommendations for both technical and non-technical audiences.
  • 6 or more years of progressively responsible cybersecurity or closely related technical experience, including senior-level ownership of security operations, detection engineering, incident response, or enterprise security controls.
  • Demonstrated ability to grow into principal-level responsibility for security architecture, detection strategy, and technical risk leadership.
  • Experience in public sector, local government, or critical infrastructure security environments.
  • Hands-on experience with CrowdStrike Falcon modules (EDR, NG-SIEM, Identity Protection, or Exposure Management).
  • Familiarity with Palo Alto Networks firewall administration or network security monitoring.
  • Experience with Microsoft Entra ID, Active Directory, or cloud identity and access management in AWS or GCP environments.
  • Familiarity with the MITRE ATT&CK framework and its application to detection and threat hunting.
  • Preferred certification: CISSP. Other relevant certifications may include:
  • Security+, CySA+, SSCP, GSEC
  • GCIA, GCIH, or CEH

SCREENING AND EVALUATION
The application packet: The application packet consists of the following required documents. Please ensure that you upload these documents in your online application. Make sure your application is complete, missing any part of these items could result in an incomplete application and will not be moved forward in the recruitment.
  • A completed online application
  • Responses to supplemental questions

The selection process: We expect to evaluate candidates for this recruitment as follows. The selection process is subject to change.
  • Initial review of minimum qualifications
  • In-depth evaluation of application materials to identify the most qualified candidates
  • Consideration of top candidates/interviews
  • Testing/assessments
  • Reference check
  • Background records check

COMPENSATION, BENEFITS AND REPRESENTATON
The full-salary range for this position is step 1: $94,106.41 to step 7: $126,142.16. However, unless a candidate's qualifications justify, based on the requirements and Metro's internal equity review process, the appointment will likely be made between step 1: $94,106.41 to the equity range step 4: $108,947.96.
This position is not eligible for overtime and represented by AFSCME 3580 union. It is classified as a Systems Administrator III position. Classification descriptions are typically written broadly and do not include the specific duties and responsibilities of the positions.
Questions?
Recruiter: Carrie Gundermann
Email:
Additional Information
Equal employment opportunity
All qualified persons will be considered for employment without regard to race, color, religion, sex, national origin, age, marital status, familial status, gender identity and expression, sexual orientation, disability for which a reasonable accommodation can be made, or any other status protected by law.
Non-discrimination?in hiring decisions
Metro is committed to equal employment?opportunity?and?complies with?all applicable federal, state, and local civil rights laws. Metro employment decisions - including recruitment, screening, interviewing, selection, promotion, compensation, and separation - must not discriminate based on race, color, national origin, ethnicity, religion, sex, sexual orientation, gender identity, disability, age, veteran status, or any other protected class.??
Accommodation
Metro will gladly provide a reasonable accommodation to anyone whose specific disability prevents them from completing this application or participating in this recruitment process. Please contact the recruiter outlined in the job announcement in advance to request assistance.
Veterans' preference
Under Oregon Law, qualified veterans may be eligible for veterans' preference when applying for Metro positions. If you are a veteran and would like to be considered for a veterans' preference for this job, please provide qualifying documents as instructed during the application process.
Hybrid Telework
This position is designated as "hybrid telework." You will be required to work onsite and at times have the option to work away from your assigned work location. The specific schedule and balance of onsite and telework will be discussed with the hiring manager at the time of offer. This position also requires off-hours response to security events, incidents, or urgent operational needs, which may include remote response and onsite response when necessary. Employees must reside in Oregon or Washington to work at Metro. Please note, the designation of hybrid telework may be subject to change at a future time.Pay equity at Metro
No matter who you are or where you work at Metro, you deserve to be paid fairly for the work you do.Every worker must get equal pay for equal work regardless of your gender, race, age, or other protected characteristics. has established processes and conducts routine pay equity reviews as part of the hiring process to ensure compliance with the 2017 Oregon Pay Equity Act.
Online applications
Metro accepts job applications online. If you need assistance or accommodation with your application, or access to a computer, please contact the recruiter outlined in the job announcement in advance to request assistance.
How