{"id":2903457,"url":"https://alion.io/job/acko-senior-infosec-analyst","title":"Senior InfoSec Analyst","company":{"id":6752,"name":"Acko","domain":"acko.com","url":"https://alion.io/company/acko","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Kula","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":41000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-19T07:19:45Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-30T15:22:10Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"About Us\nACKO is the protection destination for over 200 million tech-savvy families across India, protecting their families, assets and money. Launched in 2016, ACKO started by reimagining insurance, making it simple, hassle-free and customer-first. Today, our mission goes beyond that: we aim to touch the lives of 1 million users, building products that solve real-world problems with technology at the core.\nWe are not just another insurance company, our DNA is product-tech, and our approach is bold, innovative, and digital-first. From zero commission, zero paperwork, and instant renewals to same-day claims settlements and app-based tracking, ACKO is a Welcome Change from traditional insurers. But what truly sets us apart? Our people. At ACKO, every Acker’s voice and ideas matter. We’re a vibrant, inclusive team of creators, thinkers, and doers, building products that redefine protection while ensuring each Acker grows, thrives and does meaningful work.\nJoin us at ACKO, where bold ideas, real impact and tech-driven innovation redefine protection and peace of mind - and where YOU can make a real difference in people's lives. ACKO is a product-tech company, launched in 2016, solving real-world problems for customers, starting with insurance. And as a customer-first organization serving the digitally-savvy, ACKO’s value proposition of ‘Welcome Change’ focuses on offerings that make insurance simple and hassle-free! With features such as zero commission, zero paperwork, instant renewal, same-day claim settlements, and app-based updates on claims, ACKO is a 'Welcome Change' from traditional insurers.\nHaving said that, we are not just another conventional insurance firm, or the people consulted solely for \"claims”! Anchored in a tech-centric philosophy, ACKO’s approach fuels innovation, empowering us to develop comprehensive products that cater to every aspect of our customers' insurance requirements. And while we are at it, we put our Ackers at the heart of everything we do. We're not your typical 9-to-5 workplace; we're a vibrant and inclusive bunch of innovators and creators making sure every Acker’s idea matters, their voice is heard, and their growth is part of our mission.\nAbout the Role Experience: 6-8 Years\nFunction: Information Security / Security Operations\nRole Overview\nWe are looking for a hands-on Senior InfoSec Analyst with strong experience in leading Security Operations, incident response, SIEM management, EDR, and security log analysis.\nThe candidate should be capable of independently handling complex security incidents and have practical experience across SASE, cloud security, threat hunting, brand monitoring, AI, and security automation.\nKey Responsibilities\nMonitor, investigate, and respond to security alerts and incidents.\n\nManage and optimize the SIEM platform, including log sources, correlation rules, detection use cases, dashboards, and alert tuning.\n\nPerform EDR investigations and analyze suspicious endpoint activities.\n\nAnalyze and correlate SASE, cloud, identity, endpoint, and network security logs.\n\nIndependently manage complex security incidents from investigation through containment, remediation, and closure.\n\nConduct threat hunting, IOC analysis, root-cause analysis, and incident response.\n\nDevelop and tune security detection rules to improve detection quality and reduce false positives.\n\nMonitor external threats including phishing websites, look-alike domains, brand impersonation, fake accounts, and exposed credentials.\n\nSupport brand-protection investigations and takedown activities.\n\nAutomate repetitive SOC activities using scripts, APIs, SOAR, and other automation tools.\n\nLeverage AI/GenAI to improve security investigations, threat analysis, reporting, detection, and SOC efficiency.\n\nPerform post-incident reviews and recommend improvements to security controls and detection capabilities.\n\nMaintain incident documentation, dashboards, metrics, and security reports.\n\nProvide technical guidance and mentoring to other security team members.\n\nWork with internal teams to drive remediation and continuous improvement of the organization's security posture.\n\nMandatory Skills\n6-8 years of hands-on experience in Information Security / Security Operations.\n\nStrong experience in SIEM management, security monitoring, and log analysis.\n\nStrong incident investigation and response capabilities.\n\nHands-on experience with EDR investigation and threat hunting.\n\nStrong experience developing and tuning SIEM detection and correlation rules.\n\nExperience analyzing SASE security logs.\n\nExperience with cloud security monitoring and log analysis.\n\nGood understanding of networking, DNS, HTTP/HTTPS, proxies, firewalls, authentication, and common cyberattack techniques.\n\nPractical knowledge of the MITRE ATT&CK framework.\n\nStrong analytical, troubleshooting, and problem-solving skills.\n\nAbility to independently own and drive complex security incidents.\n\nStrong communication and stakeholder-management skills.\n\nGood to Have\nExperience across AWS, Azure, and/or GCP security monitoring.\n\nBrand monitoring / Digital Risk Protection experience.\n\nSOAR platform experience.\n\nPython, PowerShell, or API-based automation experience.\n\nPractical experience using AI/GenAI in security operations.\n\nExperience integrating security platforms with SIEM/SOAR.\n\nRelevant certifications in security operations, SIEM, EDR, SASE, cloud\n\nsecurity, incident response, or threat hunting.\n\nPreferred Candidate\nWe are looking for a strong hands-on security professional who can go beyond basic alert monitoring andindependently own complex security investigations and SOC improvements.\nThe candidate should have a strong detection, threat-hunting, and automation mindset, be comfortable working across multiple security technologies, and identify opportunities to improve SOC capabilities using automation and AI.\nThe role also requires the ability to mentor team members, work effectively with cross-functional teams, and communicate security risks and incidents clearly to stakeholders.","description_format":"text","description_chars":6053,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Security","Property & Casualty Insurance","Insurance Brokers & Agencies"],"lifecycle":[{"event":"open","at":"2026-10-20T07:19:45Z"}],"visa":[],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.876,"p_room":0.9,"age_days":10,"expected_fill_days":28,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/acko-senior-infosec-analyst","json_url":"https://alion.io/job/acko-senior-infosec-analyst.json","meta":{"generated_at":"2026-10-30T17:03:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6752},"rest":"https://alion.io/mcp/rest/get_company?id=6752"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Facko-senior-infosec-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Facko-senior-infosec-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Facko-senior-infosec-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/acko-senior-infosec-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Facko-senior-infosec-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2903457}},{"tool":"search_jobs","arguments":{"company":"acko.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2903457},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}