Senior SOC Analyst/Consultant
First seen by Alion on Sep 17, 2026.
At Allstate, great things happen when our people work together to protect families and their belongings from life's uncertainties.
And for more than 90 years, our innovative drive has kept us a step ahead of our customers' evolving needs.
From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.
Job Description :
The Allstate Cybersecurity & Controls (ACC) Threat Detection and Response team is responsible for detecting, investigating, responding to, and remediating cybersecurity incidents across on-premises, cloud, and affiliated environments.
The Incident Management Senior Consultant II plays a key role in leading incident investigations, coordinating response activities, and minimizing cyber risk through effective threat detection and incident management.
Primary Responsibilities :
- Monitor, analyse, and investigate security alerts generated from SIEM, EDR/XDR, Email Security, Cloud Security, and other security platforms.
- Lead and coordinate cybersecurity incident response activities for medium to high severity incidents.
- Collaborate with internal stakeholders, technical teams, and external partners to drive incident resolution and remediation efforts.
- Document investigation findings, timelines, lessons learned, and response activities in accordance with established processes and procedures.
- Communicate incident status, risks, and recommendations to leadership and relevant stakeholders.
- Participate in threat hunting, proactive detection improvement initiatives, and continuous enhancement of incident response capabilities.
- Support after-hours incident response activities and rotational on-call responsibilities as required in weekends.
Primary Skills & Criteria :
- Experience serving as an Incident Commander or lead investigator during cybersecurity incidents.
- Strong understanding of incident response methodologies, security operations processes, and cyber kill chain concepts.
- Experience with EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, or similar technologies.
- Strong knowledge of network technologies including TCP/IP, DNS, HTTP/S, VPN, Firewalls, IDS/IPS, and network traffic analysis.
- Hands-on experience analysing logs and security events from Azure, AWS, Microsoft 365, or other cloud platforms.
- Knowledge of leveraging AI-assisted security operations, including threat detection, investigation acceleration, alert triage, automation, and operational efficiency improvements within a Security Operations Center (SOC).
- Basic understanding of AI/Generative AI security risks, including prompt injection, data leakage, unauthorized model access, and misuse of AI applications within enterprise environments.
- Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.
Experience & Certifications :
- Minimum 8 years of overall IT/Cybersecurity experience with at least 5 - 6 years in Security Operations, Incident Response, or Threat Detection roles.
- Preferred certifications include GCIH, GSEC, GISF, CEH, CompTIA Security+, SC-200, or equivalent cybersecurity certifications.
Primary Skills :
- Customer Centricity, Digital Literacy, Inclusive Leadership, Learning Agility, Results-Oriented.
About Allstate :
Joining our team isn't just a job - it's an opportunity.
One that takes your skills and pushes them to the next level.
One that encourages you to challenge the status quo.
One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger - a winning team making a meaningful impact.
The Allstate Corporation is one of the largest publicly held insurance providers in the United States.
Ranked No. 84 in the 2023 Fortune 500 list of the largest United States corporations by total revenue, The Allstate Corporation owns and operates 18 companies in the United States, Canada, Northern Ireland, and India.
Allstate India Private Limited, also known as Allstate India, is a subsidiary of The Allstate Corporation.
The India talent center was set up in 2012 and operates under the corporation's Good Hands promise.
As it innovates operations and technology, Allstate India has evolved beyond its technology functions to be the critical strategic business services arm of the corporation.
With offices in Bengaluru and Pune, the company offers expertise to the parent organization's business areas including technology and innovation, accounting and imaging services, policy administration, transformation solution design and support services, transformation of property liability service design, global operations and integration, and training and transition.
Skills
Security, Security Operations Center, Incident Management, SIEM, Cloud Security, Threat Hunting, Security Risk Management, Microsoft Defender, Crowdstrike, Threat Detection