{"id":3369469,"url":"https://alion.io/job/alvaria-soc-analyst-i","title":"SOC Analyst I","company":{"id":1923389,"name":"Alvaria","domain":"alvaria.com","url":"https://alion.io/company/alvaria","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Sophos","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"ITSM","optional":true},{"name":"Microsoft Entra ID","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-10-28T00:23:20Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-11-09T06:35:58Z","board_verified":true,"closed_at":null,"days_open":12,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":12},"description":"Security Operations Center (SOC) Analyst I\nLocation: Bangalore, India\nDepartment: Cybersecurity Operations Center (CSOC)\nEmployment Type: Full-Time Work Arrangement: Bangalore-based; remote/hybrid options negotiable after onboarding\nRole focus: Monitor, validate, triage, document, and escalate. Build strong investigation fundamentals while operating within established CSOC procedures.\n\nJob Summary\nThe Security Operations Center (SOC) Analyst I is an entry-level cybersecurity role responsible for monitoring, validating, and triaging security alerts across endpoint, identity, email, network, vulnerability, and cloud security telemetry. The analyst performs initial investigation, documents evidence, follows established CSOC playbooks, and escalates events that require deeper analysis or response. This role is designed for early-career security professionals who want to build strong foundations in security operations, incident response, and threat detection in a global enterprise environment.\nKey Responsibilities\nMonitor and triage alerts from SIEM, EDR, identity, email security, vulnerability management, and cloud security platforms.\nPerform initial analysis using platforms such as Microsoft Sentinel, Microsoft Defender, Sophos, Tenable, and equivalent enterprise security tools.\nValidate alert context, identify affected users and assets, gather relevant evidence, establish an initial timeline, and categorize or escalate events according to CSOC procedures.\nInvestigate common SOC scenarios including phishing, suspicious authentication, endpoint alerts, user-reported security events, and endpoint health issues.\nUse basic KQL and approved search or hunting capabilities to retrieve and correlate security telemetry.\nCreate and maintain clear security tickets that capture evidence, actions taken, current state, escalation rationale, and next steps.\nSupport vulnerability tracking, remediation follow-up, and validation of security findings.\nPreserve investigation evidence and follow Alvaria data handling and security requirements throughout the investigation lifecycle.\nCollaborate with global security, IT, identity, endpoint, cloud, and infrastructure teams when additional investigation or remediation is required.\nFollow established SOPs and playbooks and contribute updates to knowledge articles as recurring investigation patterns are identified.\nRequired Qualifications\nBachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related technical field.\n1+ years of experience in cybersecurity, helpdesk, technical support, systems administration, or a related technical role.\nFoundational understanding of SIEM, EDR, identity security, endpoint security, and vulnerability management concepts.\nWorking knowledge of Windows and Linux fundamentals plus TCP/IP, DNS, HTTP/HTTPS, and common network troubleshooting concepts.\nBasic understanding of Microsoft 365 and identity concepts such as authentication, MFA, account activity, and access events.\nBasic KQL or similar security-query experience with the ability to retrieve and interpret event data.\nAbility to analyze phishing messages, suspicious sign-ins, endpoint alerts, and other common security events using documented procedures.\nStrong written communication, attention to detail, and ticket documentation skills.\nAbility to manage assigned work reliably, recognize when escalation is required, and operate effectively in a team environment.\nPreferred Skills and Certifications\nCompTIA Security+ and/or Microsoft Certified: Security Operations Analyst Associate (SC-200), completed or in progress. • Experience with ITSM platforms such as Freshservice or ServiceNow.\nExposure to Microsoft Entra ID, Microsoft Defender, Microsoft Sentinel, Sophos, Tenable, or comparable enterprise security platforms.\nFoundational knowledge of AWS or other cloud environments and cloud security concepts.\nExposure to PowerShell or Python for security analysis, data handling, or task automation.\nDemonstrated interest in developing toward incident investigation, threat hunting, detection engineering, or cloud security responsibilities.\nSuccess in This Role\nSuccess is demonstrated through accurate triage, disciplined evidence collection, clear ticket documentation, timely escalation, and continued growth toward independent investigation and threat hunting capabilities.","description_format":"text","description_chars":4392,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security","Contact Center Software"],"lifecycle":[{"event":"open","at":"2026-10-28T00:23:20Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":97500,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":79,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.882,"p_room":0.9,"age_days":12,"expected_fill_days":29,"reasons":["conf:4","velocity","win:mid","comp:junior,attention"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/alvaria-soc-analyst-i","json_url":"https://alion.io/job/alvaria-soc-analyst-i.json","meta":{"generated_at":"2026-11-09T07:12:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4136,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1923389},"rest":"https://alion.io/mcp/rest/get_company?id=1923389"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Falvaria-soc-analyst-i"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Falvaria-soc-analyst-i"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Falvaria-soc-analyst-i"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/alvaria-soc-analyst-i\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Falvaria-soc-analyst-i"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3369469}},{"tool":"search_jobs","arguments":{"company":"alvaria.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3369469},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}