SOC Analyst Jobs in Tucson, AZ
SOC analysts in Tucson watch the alerts that protect a power grid, a university, county courts and an Air Force base. Tucson Electric Power runs its own cyber security operations center downtown, and Peraton staffs cyber defense work at Davis-Monthan. Current openings are below, followed by who hires and what it pays.
Current SOC Analyst Openings in Tucson, AZ
Listings marked External are sponsored openings provided by the Jobs2Careers network.
SOC Analyst Work in Tucson
Tucson's security operations work clusters around critical infrastructure and defense rather than big corporate headquarters. Tucson Electric Power keeps a Cyber Security Operations Center with analysts on a 24x7 rotation, the University of Arizona has hired a full-time SOC analyst to watch the networks that run campus central plants, and Pima County's Superior Court IT division posts security analysts who watch firewalls, intrusion detection and event logs for the courts downtown.
On the southeast side, Davis-Monthan Air Force Base anchors the cleared side of the market. Contractors such as Peraton staff cyber analyst and cyber defense roles there that monitor, analyze and respond to incidents for Air Combat Command, and those jobs require a Top Secret clearance. That split defines the local market: civilian SOC jobs at the utility, the university and the county, and better-paid cleared work at the base.
Top Tucson Employers for SOC Analysts
These Tucson employers hire for security monitoring and incident response work:
- Tucson Electric Power - IT security analysts monitor security events, handle incident response and back up the utility's Cyber Security Operations Center analysts.
- Peraton - cyber analysts at Davis-Monthan Air Force Base monitor, analyze and respond to cyber incidents for Air Force customers; TS/SCI required.
- University of Arizona - has hired a SOC analyst for facilities central plants and critical infrastructure on the main campus, and its Information Security Office runs a student-staffed SOC.
- Pima County - the Superior Court IT Services Division hires security analysts to monitor firewalls, IDS/IPS and event logs and investigate incidents.
SOC Analyst Salaries in Tucson
- Entry level (Tier 1, 0-3 years): roughly $50,000 to $65,000 per year.
- Experienced (Tier 2, 3-6 years): roughly $65,000 to $90,000 per year.
- Senior, cleared or lead (6+ years): roughly $90,000 to $140,000 per year.
These are estimates that vary by employer and experience. Recent Tucson postings show the spread: the University of Arizona listed its SOC analyst at $53,039 to $65,000, Pima County listed a court security analyst at $74,592, and Peraton has posted Davis-Monthan cyber analyst ranges from $66,000 to $106,000, with senior cleared roles above $100,000. A clearance is the biggest single lever on pay here.
How to Become a SOC Analyst in Tucson
Pima Community College's Cybersecurity AAS at East Campus on Irvington Road is the most direct local path. It is an NSA Center of Academic Excellence in Cyber Defense program of study that names SOC analyst as a target role, and the college's Center of Excellence in IT and Cybersecurity runs a cybersecurity operations center where students practice. The University of Arizona College of Information Science offers a BAS in Cyber Defense on the main campus and online, and Pima JTED teaches cyber to high school students at The Bridges. Arizona has no license for SOC analysts. Employers ask for CompTIA Security+ or similar, and defense contractors require DoD 8140 qualification plus a clearance.
What the Job Involves
A SOC analyst spends the shift in the SIEM, triaging alerts, deciding which are false positives and which need escalation. The work includes reviewing firewall, endpoint and intrusion detection logs, writing up incidents, tuning detection rules, tracking indicators of compromise and handing serious cases to incident responders. Many SOCs run nights, weekends and on-call rotations.
Skills Employers Look For
- SIEM experience (Splunk or similar) and log analysis
- Firewall, IDS/IPS and endpoint protection knowledge
- Incident response and basic forensics
- TCP/IP networking and Windows and Linux administration
- CompTIA Security+ early, CySA+ or GIAC certifications later
- Clear written incident reports
- Clearance eligibility (U.S. citizenship) for Davis-Monthan contract work
Career Path and Advancement
In Tucson the ladder usually starts at help desk or a Tier 1 SOC seat, moves to Tier 2 analyst and incident responder, then to security engineer, threat hunter or SOC lead. Tucson Electric Power's ladder runs IT Security Analyst I, II and III up to Supervisor of Enterprise Cyber Security Operations, and analysts who earn a clearance often move to contractor work at Davis-Monthan or to Raytheon's security teams near the airport.
Related Careers in Tucson
These Tucson guides cover the closest alternatives for SOC analysts:
Frequently Asked Questions
Do you need a license to be a SOC analyst in Arizona?
No. Arizona does not license SOC analysts or other cybersecurity workers. Employers screen on certifications such as CompTIA Security+, and defense contractors at Davis-Monthan also require DoD 8140 qualification and a security clearance.
How much do SOC analysts make in Tucson?
Entry-level SOC analysts in Tucson typically earn about $50,000 to $65,000 a year. Experienced analysts earn roughly $65,000 to $90,000, and senior or cleared analysts can pass $100,000. The University of Arizona posted its SOC analyst at $53,039 to $65,000.
Which Tucson employers hire SOC analysts?
Tucson Electric Power runs a Cyber Security Operations Center, the University of Arizona has hired a SOC analyst for campus critical infrastructure, and Pima County's Superior Court hires security analysts. Peraton staffs cleared cyber analyst work at Davis-Monthan Air Force Base.
Can I become a SOC analyst without a degree?
Often, yes. Tucson Electric Power's entry analyst level asks for a high school diploma with a bachelor's preferred, and many employers accept experience in place of a degree. Pima Community College's two-year Cybersecurity AAS at East Campus is built for SOC work.
Do SOC analysts work nights in Tucson?
Many do. Security operations centers watch networks around the clock, so shift work and on-call rotations are common. Tucson Electric Power lists a 24x7 rotating on-call for its IT security analysts.
Ready to apply? Browse all SOC analyst jobs in Tucson, AZ on TucsonHIRED and apply today.