{"id":3242111,"url":"https://alion.io/job/avnet-cybersecurity-analyst-ii","title":"Cybersecurity Analyst II","company":{"id":723170,"name":"Avnet","domain":"avnet.com","url":"https://alion.io/company/avnet-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":62,"ghost_share":0,"stale_share":0.887,"repost_share":0.016,"time_to_fill_p50_days":30,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":19000,"max_usd":46000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-22T00:00:00Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T20:05:41Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Overview: The Security Analyst II is responsible for investigating and responding to complex, escalated, or high-impact cybersecurity events within a 24/7 Security Operations Centre (SOC). The role involves analysing security activity across multiple technology domains, correlating available evidence, determining the scope and potential impact of incidents, and supporting appropriate response and remediation actions.\nIn addition to managing assigned investigations, the Security Analyst II serves as an on-shift technical escalation point for Security Analyst I, providing guidance on complex cases and supporting timely decision-making. The role requires strong investigative judgement across areas such as phishing, account compromise, malware, and potential data exposure, while ensuring investigations are properly documented, progressed, and handed over between operational shifts.\nThe position operates within a 24/7 Security Operations Centre, and candidates should be comfortable working rotational shifts, including nights, weekends, and public holidays.\nPrincipal Responsibilities\nMonitoring and Analysis:\nSupport a 24x7 Global Security Operations Centre (SOC) environment by responding to security events in the environment.\nMaintain visibility across the active alert queue and support timely investigation and resolution of security events.\nIncident Triage and Response:\nLead the investigation and response of higher-impact or complex security incidents.\nAssess the scope, severity, and potential business impact of suspicious activity.\nRecommend and coordinate appropriate containment, remediation, and escalation actions in accordance with established procedures.\nCollaborate with incident response and relevant internal teams to support effective incident handling.\nAlert Investigation:\nInvestigate and analyse alerts generated by security tools (EDR, NDR, SIEM) to identify potential security incidents.\nCorrelate available evidence to develop investigation hypotheses, construct timelines, and identify potentially affected users or systems.\nDocument investigation findings and provide detailed reports.\nTechnical Escalation and Analyst Support:\nServe as an on-shift technical escalation point for junior analysts handling complex or unfamiliar security events.\nReview escalated investigations for completeness and accuracy and provide guidance on additional investigative steps.\nCommunicate technical findings, security risks, and required actions clearly to relevant stakeholders.\nSupport the coordination of evidence gathering, containment, remediation, and recovery activities.\nShift Handover and Collaboration:\nProvide structured handovers of ongoing investigations between Security Operations Centre shifts.\nReview and accept cases transferred from previous shifts.\nMaintain appropriate ownership of investigations until resolution, escalation, or formal handover.\nSecurity Documentation and Process Improvement:\nContribute to the development and maintenance of security documentation, procedures, playbooks, and incident response plans.\nIdentify recurring false positives, detection gaps, and operational inefficiencies.\nRecommend improvements to security monitoring, investigation, and escalation processes.\nContinuous Learning:\nStay current with emerging threats, vulnerabilities, and industry best practices.\nParticipate in training and development programmes to enhance skills and knowledge.\nWork Experience:\n3+ years of relevant experience in security operations, incident response, threat detection, or a comparable cybersecurity function.\nDemonstrated experience independently investigating security incidents, handling escalations, and supporting incident response activities.\nPrior experience working in a 24x7 or shift-based Security Operations Centre environment is strongly preferred.\nEquivalent practical experience may be considered where the required technical and investigative capability is clearly demonstrated.\nExperience working within globally distributed teams and collaborating effectively across cultures, regions, functions, and time zones.\nCollaborative and team-oriented approach, with the ability to work effectively with Security, Engineering, Product, Infrastructure, GRC, Privacy, Legal, and other business stakeholders.\nIntermediate-level cybersecurity certifications such as AZ-500, CySA+, GSOC, or GCIA are an added advantage.\nExcellent analytical and problem-solving abilities.\n\nEducation and Skills:\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience demonstrating comparable knowledge and job skills.\nStrong understanding of cybersecurity principles, security monitoring, incident response, and security operations processes.\nStrong understanding of common cybersecurity threats, vulnerabilities, attack techniques, and adversary behaviour, with the ability to apply this knowledge during investigations.\nProficient in security monitoring and investigation techniques, with the ability to independently analyse alerts, correlate evidence, and determine appropriate response or escalation actions.\nStrong written and verbal communication skills in English, with the ability to communicate investigation findings, risks, status, and required actions clearly to both technical and non-technical stakeholders.\n\nPreferred Qualifications:\nExperience with proactive threat hunting or advanced threat analysis.\nPrevious experience acting as an Incident Coordinator, Incident Commander, or security incident lead is highly desirable.\nFamiliarity with scripting or automation for security analysis and operational efficiency.\nExperience contributing to post-incident reviews, root-cause analysis, or lessons-learned activities.\nFamiliarity with phishing investigation and advanced threat intelligence analysis.\nExperience contributing to security playbooks, procedures, or process-improvement initiatives.\nThe above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills.","description_format":"text","description_chars":6148,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Electronic Components Distribution"],"lifecycle":[{"event":"open","at":"2026-10-25T16:55:30Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":30,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/avnet-cybersecurity-analyst-ii","json_url":"https://alion.io/job/avnet-cybersecurity-analyst-ii.json","meta":{"generated_at":"2026-10-27T23:46:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15945,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":723170},"rest":"https://alion.io/mcp/rest/get_company?id=723170"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favnet-cybersecurity-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favnet-cybersecurity-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favnet-cybersecurity-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avnet-cybersecurity-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favnet-cybersecurity-analyst-ii"}]}