{"id":2497557,"url":"https://alion.io/job/all-rights-reserved-soc-analyst-2","title":"SOC Analyst","company":{"id":2313062,"name":"Comm-IT","domain":"comm-it.com","url":"https://alion.io/company/comm-it-com","size_band":"11-50","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":{"grade":"B","score":81,"open_postings":4,"ghost_share":0,"stale_share":0.75,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-20T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mexico City, Mexico"],"countries":["MX"],"hiring_countries":["MX"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":24000,"max_usd":68000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":528},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DNS","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Bash","optional":true},{"name":"GCP","optional":true},{"name":"IAM","optional":true},{"name":"Python","optional":true}],"status":"closed","first_seen_at":"2026-09-04T12:10:11Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-10-19T11:13:56Z","board_verified":false,"closed_at":"2026-10-19T11:13:56Z","days_open":44,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":44},"description":"Description\nWe’re looking for a Tier 1 SOC Analyst to join our team and handle initial triage, monitoring, and investigation of security alerts across cloud and endpoint environments.\nThis is a client-facing role requiring strong English, excellent verbal communication skills, and the ability to clearly communicate findings and escalations. The position is intended for candidates with at least 1 year of hands-on SOC / Security Operations experience.\nThe role is based on morning shifts aligned with East Asia working hours.\nKey Responsibilities:\nMonitor security alerts from SIEM, EDR, and cloud platforms\nPerform initial triage and classification of alerts as true or false positives\nInvestigate suspicious activities across endpoints, identities, and cloud environments\nEscalate confirmed incidents to Tier 2 / Incident Response teams with proper context\nAnalyze logs from multiple sources, including CloudTrail, Azure Activity Logs, OS logs, and other relevant security data sources\nDocument findings clearly in tickets and investigation reports\nFollow existing playbooks and contribute to improving detection logic over time\nCommunicate clearly with internal teams and clients regarding alerts, findings, and escalations\nRequirements\nRequired Qualifications:\n1+ years of experience in SOC / Security Operations\nHands-on experience with EDR tools such as CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint\nFamiliarity with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or similar\nUnderstanding of networking basics, including IP, DNS, HTTP/S, ports, and related concepts\nBasic knowledge of Linux and Windows operating systems\nAbility to analyze logs and identify suspicious behavior\nFluent English, both written and spoken - mandatory\nExcellent verbal communication skills, especially in client-facing situations\nPreferred Qualifications:\nExperience with cloud environments such as AWS, Azure, or GCP\nKnowledge of GCP / Google Cloud Platform - significant advantage\nAbility to investigate cloud activity, including IAM, API calls, and resource changes\nUnderstanding of identity-based attacks, such as token abuse and privilege escalation\nExperience with scripting in Python or Bash","description_format":"text","description_chars":2211,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Mexico","iso":"MX","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-14T05:12:04Z"},{"event":"close","at":"2026-10-19T11:13:56Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/all-rights-reserved-soc-analyst-2","json_url":"https://alion.io/job/all-rights-reserved-soc-analyst-2.json","meta":{"generated_at":"2026-10-20T13:14:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14700,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2313062},"rest":"https://alion.io/mcp/rest/get_company?id=2313062"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fall-rights-reserved-soc-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fall-rights-reserved-soc-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fall-rights-reserved-soc-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/all-rights-reserved-soc-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fall-rights-reserved-soc-analyst-2"}]}