{"id":3489986,"url":"https://alion.io/job/centric-software-security-operations-analyst","title":"Security operations analyst","company":{"id":1774336,"name":"Centric Software","domain":"centricsoftware.com","url":"https://alion.io/company/centricsoftware","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":20,"ghost_share":0,"stale_share":0.9,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EventBridge","optional":false},{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"SharePoint","optional":false},{"name":"SIEM","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-29T23:09:14Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-31T06:29:12Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Centric Software:\nCentric Software® is a global leader, providing an innovative and AI-enabled product-concept-to-commercialization platform for retailers, brands and manufacturers of all sizes. We equip retail, fashion, luxury, footwear, outdoor, home and consumer goods brands with pioneering best-of-breed solutions to plan, design, develop, source, comply, buy, make, price, allocate, sell and replenish products. Our technology powers brands to streamline processes, drive efficiency and operate with confidence in an ever-changing market.\nOur story is one of rapid growth, bold ideas and extraordinary opportunities. We’re here to challenge the status quo-and we’re looking for brilliant people who want to do the same. No matter where you are in the world, this is your chance to be part of something exceptional.\nJob Description\n1.1 SIEM G SOAR Engineering (Palo Alto Cortex)\nDesign, deploy and maintain log source integrations into Palo Alto Cortex XSIAM / XSOAR, ensuring normalisation, parsing accuracy and data quality across all connected sources.\nDevelop, test and continuously improve SOAR playbooks for automated triage, enrichment and response across key incident types.\nOwn SIEM content including detection rules, correlation policies, dashboards and alert thresholds; perform ongoing tuning to reduce false-positive volumes.\nMaintain platform health including connector status monitoring, API rate-limit management and capacity planning for log ingestion pipelines.\nProduce and maintain engineering documentation including integration runbooks, playbook specifications and change records in accordance with CAB policy.\n1.2 Endpoint Security Engineering (CrowdStrike Falcon)\nAdminister and engineer the CrowdStrike Falcon platform, including sensor deployment management, policy configuration and response workflow alignment with SOC procedures.\nConfigure and maintain Falcon data connectors into the SIEM, ensuring EDR telemetry is enriched and actionable within the detection pipeline.\nContribute to host-based detection content and work with the SOC team to validate alert fidelity from Falcon- sourced events.\nSupport incident response activities requiring Falcon RTR (Real Time Response) capabilities where required.\n1.3 Cloud Security Logging G Integration\nEngineer and maintain security log collection from multi-cloud environments into the SIEM, including:\nAWS - configure and operate GuardDuty, Security Hub, CloudTrail, VPC Flow Logs and S3 access logging; manage event forwarding via EventBridge and SǪS/SNS pipelines.\nAzure - configure and maintain Microsoft Defender for Cloud, Azure Monitor Diagnostic Settings and Entra ID audit and sign-in log ingestion.\nGCP - configure and maintain Cloud Audit Logs, Security Command Centre findings export and Pub/Sub-based log forwarding into the SIEM.\nEnsure cloud logging coverage aligns with the organisation’s detection requirements and regulatory obligations, and identify and remediate gaps in telemetry coverage.\nMaintain cloud-side IAM roles and service principals used for log collection with least-privilege principles.\n1.4 Microsoft Entra ID G Office 365 Integration\nWork alongside the IT team to maintain and improve security-relevant integrations between Entra ID and the SIEM, including Conditional Access policy audit logging, risky sign-in alerting and identity-based detection use cases.\nSupport the health and configuration of Microsoft 365 Defender connectors, including Exchange Online, SharePoint and Teams audit log ingestion.\nAssist in periodic reviews of Entra ID security configuration posture, including MFA policy coverage, guest account hygiene and privileged role assignments from a security monitoring perspective.\nAct as a technical liaison between Information Security and IT on identity-related security matters, escalating findings through appropriate governance channels.\n1.5 SOC Operations G Continuous Improvement\nContribute to the SOC as a Tier 2/3 resource on complex investigations, providing engineering context to support analyst triage.\nParticipate in threat-led detection engineering, translating threat intelligence and MITRE ATTCCK TTPs into actionable detection logic.\nSupport vulnerability and configuration management activities where they relate to SIEM-connected assets.\nContribute to weekly and monthly SOC reporting by maintaining the accuracy and completeness of underlying data sources and metrics.\n2. SFIA Competency Framework\nThis role is aligned to the Skills Framework for the Information Age (SFIA) Version 8. SFIA uses a scale of 1-8 to define the level of responsibility, autonomy and complexity at which a skill is applied. The table below explains what each level means, followed by the specific competencies required for this role.\nSkills\nsiem, soar, endpoint security, cloud security, logging, integration, engineering, deployment, incident response, monitoring\nCentric Software provides equal employment opportunities to all qualified applicants without regard to race, sex, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status or genetic information.","description_format":"text","description_chars":5157,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["CAD, PLM & BIM Software","Retail & Pricing Analytics"],"lifecycle":[{"event":"open","at":"2026-10-29T23:09:14Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":34,"reasons":["conf:12","stale_co","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/centric-software-security-operations-analyst","json_url":"https://alion.io/job/centric-software-security-operations-analyst.json","meta":{"generated_at":"2026-10-31T12:29:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19331,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774336},"rest":"https://alion.io/mcp/rest/get_company?id=1774336"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcentric-software-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcentric-software-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcentric-software-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/centric-software-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcentric-software-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3489986}},{"tool":"search_jobs","arguments":{"company":"centricsoftware.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3489986},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}