1

Security Operations Analyst Jobs in California (NOW HIRING)

Senior Security Operations Analyst

Los Angeles, CA ยท On-site

$103K - $135K/yr

The Senior Security Operations Analyst is responsible for day-to-day security operations, threat detection and response, and maintaining a strong security posture across the organization.

Senior Security Operations Analyst

Vista, CA ยท On-site

$98K - $128K/yr

The Senior Security Operations Analyst is Crexi's primary internal security practitioner, responsible for day-to-day security operations, threat detection and response, and maintaining a strong ...

The Senior Security Operations Analyst is Crexi's primary internal security practitioner, responsible for day-to-day security operations, threat detection and response, and maintaining a strong ...

Role As Security Operations Lead, you will build and own Northwood's security operations function ... Monitor and analyze telemetry across network security, identity, endpoint, and email security ...

As Security Operations Lead, you will build and own Northwood's security operations function ... analyze telemetry across network security, identity, endpoint, and email security platforms ...

next page

Showing results 1-20

Security Operations Analyst information

See California salary details

$17

$43

$60

How much do security operations analyst jobs pay per hour?

As of Jul 18, 2026, the average hourly pay for security operations analyst in California is $43.57, according to ZipRecruiter salary data. Most workers in this role earn between $34.18 and $53.85 per hour, depending on experience, location, and employer.

What are Security Operations Analysts?

Security Operations Analysts are IT professionals responsible for monitoring, detecting, and responding to cybersecurity threats within an organization. They work in security operations centers (SOCs) to analyze security incidents, investigate suspicious activities, and help implement measures to protect digital assets. Their role often involves using security tools and technologies, collaborating with other IT teams, and ensuring compliance with security policies. By proactively identifying vulnerabilities and responding to incidents, Security Operations Analysts play a critical role in safeguarding an organization's information systems.

What are the key skills and qualifications needed to thrive as a Security Operations Analyst, and why are they important?

To thrive as a Security Operations Analyst, you need a strong understanding of cybersecurity principles, incident response, and risk assessment, typically supported by a degree in computer science or related fields. Familiarity with security information and event management (SIEM) tools, intrusion detection systems, and certifications like CompTIA Security+ or CISSP is highly valuable. Analytical thinking, attention to detail, and effective communication are key soft skills that set top analysts apart. These skills and qualifications are essential for quickly identifying, investigating, and mitigating security threats to protect organizational assets.

How does a Security Operations Analyst typically collaborate with other IT and security teams?

Security Operations Analysts work closely with various IT and cybersecurity teams to monitor, detect, and respond to security threats. They regularly interact with network engineers, incident response teams, and system administrators to escalate and resolve security incidents. Effective communication and coordination are crucial, as analysts may need to provide detailed incident reports, share threat intelligence, and participate in post-incident reviews to improve security protocols. This collaborative environment helps ensure a swift response to threats and fosters ongoing professional development through cross-team knowledge sharing.

What is the difference between Security Operations Analyst vs Security Engineer?

AspectSecurity Operations AnalystSecurity Engineer
Primary FocusMonitoring, detecting, and responding to security incidentsDesigning, implementing, and maintaining security systems
CertificationsCompTIA Security+, CISSP, CEHCISSP, GIAC Security Certifications, CISSP
Work EnvironmentSecurity operations centers, incident response teamsSecurity architecture teams, development environments
ResponsibilitiesAnalyzing security alerts, incident response, threat huntingDeveloping security tools, deploying security solutions, system hardening

While both roles focus on cybersecurity, Security Operations Analysts primarily monitor and respond to threats in real-time, whereas Security Engineers design and build security infrastructure to prevent attacks. Both roles often collaborate but serve different functions within an organization's security strategy.

What Does a Security Operations Analyst Do?

A security operations analyst works with a company, organization, or government office to identify and reduce security risks to their computer network. Your duties are to keep records of any suspicious activity, install security measures to prevent breaches, and give the organization suggestions about how to avoid future incidents. As a security operations analyst, your responsibilities also include conducting research on new threats and upgrading software as necessary. You often collaborate with other employees to resolve incidents as quickly as possible.

What job categories do people searching Security Operations Analyst jobs in California look for? The top searched job categories for Security Operations Analyst jobs in California are:
What cities in California are hiring for Security Operations Analyst jobs? Cities in California with the most Security Operations Analyst job openings:
Infographic showing various Security Operations Analyst job openings in California as of July 2026, with employment types broken down into 1% Locum Tenens, 1% Internship, 83% Full Time, 8% Part Time, 2% Temporary, and 5% Contract. Highlights an 82% Physical, 5% Hybrid, and 13% Remote job distribution, with an average salary of $90,619 per year, or $43.6 per hour.
Security Operations Analyst II

Security Operations Analyst II

Prometheus Real Estate Group

San Mateo, CA โ€ข On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Re-posted 27 days ago


Job description

ABOUT PROMETHEUS
Founded in 1965, Prometheus is the largest privately held owner of apartments in the San Francisco Bay Area, with a portfolio of over 13,000 apartments in the Silicon Valley, Portland, and Seattle regions. We invest in real estate long-term and the focus on enduring quality drives every element of what we do - from our selection of locations to design decisions, reinvestments into our Neighborhoods and our operating strategy.
We are proud to be a Certified B Corporation, part of a group of companies that meets the highest standards for using business as a force for good. We have more than 500 Prometheans, and have a home office in San Mateo, with satellite offices in Portland, Oregon, and in the Bay Area. We are a vertically integrated company with four main core competencies in-house: acquisitions/investments, development, value-add renovations, and operations/property management. Prometheus has a long history of award-winning approaches to what we do, receiving over 100 awards for design and excellence including Fortune Magazine's list of 100 Best Small & Medium Companies, the 100 Best Workplaces for Women and Best Places to Work in the Bay Area.
OUR PURPOSE
We are focused on Good Living for the Greater Good. This means providing a true sense of home and belonging for our Neighbors and Prometheans and giving our time and resources to bring positive change locally and beyond. It also means supporting you in your career goals with the very best working experience, and that starts with us having fun in the work we do together.
YOUR ROLE AND IMPACT
Our IT Team is looking for a Security Operations Analyst II responsible for leading in-depth investigations and incident response to escalated events and be involved in security-based projects as well as manage security solutions/systems. This role correlates data across SIEM/XDR, identity, endpoint, network, and SaaS/cloud sources; determines true blast radius; separates routine administrative activity from attacker behavior; and coordinates containment and remediation with Infrastructure/IT.
  • Security Operations: Lead investigations for escalated incidents such as account compromises, endpoint malware, suspicious network activity, and SaaS misuse. Correlate data across SIEM/XDR, identity/SSO, endpoint/EDR, network, and cloud/SaaS logs to build attack timelines, identify entry vectors, and assess lateral movement. Coordinate containment and remediation with Infrastructure/IT-disabling or recovering compromised accounts, isolating infected endpoints and removing malware, validating EDR coverage and system integrity, and confirming cleanup success. Produce clear, audit-ready incident documentation detailing scope, evidence, actions, timelines, decisions, and resolution rationale. Act as an escalation point for the Service Desk and junior analysts, provide real-time guidance, and apply chain-of-custody and evidence-preservation practices for high-severity events, maintaining case files with hashes, screenshots, and IOC/IOA sets.
  • Detection, Playbooks, Threat Intelligence, and Continuous Improvement Response: Tune and improve detections, automate repetitive workflows, and drive incident response improvements. Refine existing rules and propose new use cases based on investigations and recurring patterns; enrich cases with threat intelligence (IOCs and TTPs) and incorporate those learnings into future detections and playbooks; Contribute and evolve response playbooks for major incident types (account compromise, endpoint malware, SaaS abuse, suspicious network activity), participate in post-incident reviews with root-cause analyses and practitioner-level technical narratives, and recommend prioritized, practical prevention and mitigation improvements. Conduct targeted threat hunts (e.g., OAuth abuse, living-off-the-land binaries, credential-stuffing against legacy protocols), define and track alert-quality KPIs (true/false positive ratios, suppression coverage), and collaborate to improve MTTD/MTTR.

HERE'S MORE OF THE NITTY-GRITTY:
Our Security Operations Analyst II possesses the following experience, skills and abilities and be able to explain and demonstrate that they can perform the essential functions of the job, with or without reasonable accommodation, using some other combination of knowledge, skills, and abilities:
  • Bachelor's Degree in the field of Computer Science, technology, or a related area with a master's degree preferred.
  • 2-5 years in Security Operations or Infrastructure/IT Operations with a security focus.
  • 2+ years Windows/sysadmin experience; macOS/Linux a plus.
  • 2+ years core networking (IP, DNS, ports, VPN, firewalls).
  • Hands-on experience with SIEM/XDR, EDR, identity/SSO, and cloud/SaaS logs.
  • Able to read Windows event logs, perform basic endpoint triage, and apply MITRE ATT&CK for triage.
  • Strong written/verbal communication and incident leadership skills.
  • CompTIA Security+ required and other security certifications preferred.

COMPENSATION AND BENEFITS
We offer a variety of benefits that take compensation well beyond a paycheck. This includes traditional benefits and benefits you might not expect or know about. The salary range provided is based on a number of factors, including location, job-related skills, experience, and qualifications.
Compensation
  • Pay Range: $105,000.00 to $135,000.00 per year
  • Discretionary Annual Bonus Plan

Benefits & Perks
  • Medical; Vision; Dental:100% Company-paid plans (including eligible dependents) and affordable buy-up options
  • Life Insurance; Accidental Death & Dismemberment Insurance; Long Term Disability
  • Behavioral Health Program Accessible 24/7
  • Tax-Free Flexible Spending Accounts
  • 401(K) Retirement Plan with Employer Matching
  • Recognition & Rewards Program (Torch)
  • Vacation: 10 days per year with accrual increase overtime
  • Anniversary Vacation: 40-hour Vacation Granted at Tenured Milestones
  • Sick Leave: 9 days per year
  • 12 paid holidays, including your birthday!
  • Paid Volunteer Time
  • Tenure-based Housing discounts
  • Educational Assistance, Tuition Reimbursement
  • Referral Bonus
  • Hybrid Work Schedule

Learn more about these and other perks of being a Promethean by exploring our full Benefits Guide.
Prometheus is proud to be an equal opportunity workplace. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, or any other status protected under federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
If you'd like more information about your EEO rights as an applicant under Federal Employment Laws, please check out these FMLA, EEO, and EPPA pages.