{"id":3793210,"url":"https://alion.io/job/allianz-endpoint-detection-response-edr-3377-2","title":"Endpoint Detection & Response (EDR)_3377","company":{"id":1757325,"name":"Allianz","domain":"allianz.com","url":"https://alion.io/company/allianz-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":100,"open_postings":143,"ghost_share":0.007,"stale_share":0.007,"repost_share":0.084,"time_to_fill_p50_days":15,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DLP","optional":false},{"name":"GitHub","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Power BI","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Snort","optional":false},{"name":"Splunk","optional":false},{"name":"SQL","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-11-05T07:33:29Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-15T01:24:23Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"Key Responsibilities\nWork with red teams to simulate attacks and see if their detection mechanisms work detection platform to analyse EDR telemetry, alerts, and log sources across several detection domains (Endpoint, Identity, SIEM, Cloud/SaaS, etc.)\nDetect campaigns and attacks against your infrastructure, and identify the actors responsible.\nImprove and assist in automating the detection of incidents by your SOC.\nDetect existing APTs in the wild of our systems.\nImprove your tools (SIEMs, FWs, IDS / IPS, WAFs, EDR) for IOC detection, avoiding false positives.\nShould have experience in Developing new correlation rules & Parser writing experience in Log source integration\nProvide recommendations in tuning and optimization of security systems, SOC security process, procedures and policies.\nDefine, create and maintain SIEM correlation rules, customer build documents, security process and procedures\nDevelop and implement threat detection and response strategies to proactively defend against cyber threats.\nDocument and communicate security incidents, vulnerabilities, and remediation efforts to stakeholders.\nStay current with the latest cyber threats, attack techniques, and security technologies to enhance detection and response capabilities.\nContribute to the continuous improvement of security monitoring and incident response processes and procedures.\nQualification\n5+ years of hands-on experience with a background in the modern attacker kill-chain, MITRE ATT&CK, and emerging enterprise threats.\n\nUnderstand digital forensics and incident response as it applies to the cloud\n\n3+ years’ experience with AzureAWSGCP andor Kubernetes and containers security.\n\n3+ years of experience querying and analysing large datasets, including experience building automated reports, alerting, workflows, and/or business intelligence solutions (e.g. SQL, Python, KQL/Azure Data Explorer, Excel, PowerBI, etc.).\n\n5+ years’ experience in cyber security, threat detection, and incident response\n\nProven experience with automation and orchestration to effectively handle an extreme volume of telemetry and logs in a timely and efficient manner\n\nFamiliarity with backend data structures used for security analysis (JSON, YAML, etc.)\n\nExperience using query languages and understanding syntax across EDR or other security platforms\n\nExperience creating and tuning detectors/rules using commonly known tools such as YARA, SIGMA, Snort, Splunk, Elastic, etc.\n\nExperience using version control software for the deployment of detectors, rules, or other automations (GitHub)\n\n5+ years’ experience in cyber security, threat detection, and incident response\n\nStrong understanding of network security, malware analysis, and security operations\n\nFamiliarity with security information and event management (SIEM) tools, EDR, DLP and relevant technologies\n\nAllianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges, is what makes us a unique employer. Together we can build an environment where everyone feels empowered and has the confidence to explore, to grow and to shape a better future for our customers and the world around us.\nAt Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. And the foundation for this is our inclusive workplace, where people and performance both matter, and nurtures a culture grounded in integrity, fairness, inclusion and trust.\nWe therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.\nJoin us . Let's care for tomorrow.","description_format":"text","description_chars":3855,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance","Asset Management & Funds","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-11-05T07:33:29Z"}],"visa":[],"liveness":{"score":80,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.89,"p_room":0.9,"age_days":8,"expected_fill_days":15,"reasons":["conf:5","velocity","win:mid","comp:brand"],"computed_at":"2026-11-14T05:58:10Z"},"pay":null,"html_url":"https://alion.io/job/allianz-endpoint-detection-response-edr-3377-2","json_url":"https://alion.io/job/allianz-endpoint-detection-response-edr-3377-2.json","meta":{"generated_at":"2026-11-15T02:17:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4256,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1757325},"rest":"https://alion.io/mcp/rest/get_company?id=1757325"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallianz-endpoint-detection-response-edr-3377-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallianz-endpoint-detection-response-edr-3377-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallianz-endpoint-detection-response-edr-3377-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allianz-endpoint-detection-response-edr-3377-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallianz-endpoint-detection-response-edr-3377-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3793210}},{"tool":"search_jobs","arguments":{"company":"allianz.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3793210},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}