{"id":138159,"url":"https://alion.io/job/enfinity-global-global-soc-specialist-cybersecurity","title":"Global SOC Specialist - Cybersecurity","company":{"id":5764,"name":"Enfinity Global","domain":"enfinity.global","url":"https://alion.io/company/enfinity-global","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workable","truth_index":{"grade":"B","score":84,"open_postings":27,"ghost_share":0.185,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":87,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"DNP3","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"IEC 61850","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-22T15:07:36Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-02T16:15:46Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":1,"flags":["company_stale"],"days_open":10},"description":"About Enfinity Global\nEnfinity Global is a purpose-driven company focused on making a positive impact on the planet by helping companies, governments and individuals transition to a carbon-free and sustainable economy. As a leading Independent Power Producer (IPP), our role is to develop, finance, build, operate and own renewable energy assets over the long term across Europe, Asia and the Americas, through our offices in the USA, Spain, Italy, UK, Netherlands, India and Japan.\nOur team of over 450 Enfiniters comprises seasoned finance professionals, as well as experienced project developers and operators with extensive industry experience across all stages of the project life cycle. We pride ourselves on being creative and innovative solution providers to our customers and partners.\nJob Summary\nEnfinity is establishing a modern, AI-driven Security Operations Center (SOC) to protect its converged IT and Operational Technology (OT) environment across a distributed portfolio of solar PV and battery energy storage (BESS) plants. The SOC is built around an AI-driven SOC automation platform operating over the Company's converged IT/OT XDR telemetry, which performs continuous, autonomous detection, triage and investigation at scale.\nWe are seeking a Global SOC Manager, based in Hyderabad, to act as the human-in-the-loop for this AI-driven SOC. This is a global role with end-to-end accountability for SOC monitoring and response across Enfinity's entire converged IT/OT portfolio. The implementation and automation of the platform itself is delivered separately but this role will contribute to its definition and implementation; once it is operational, this role is responsible for supervising day-to-day SOC operations - reviewing and validating the AI platform's findings, investigating escalations, and taking decisive action whenever human judgement and intervention are required.\nThe role reports to the Senior IT/OT Cybersecurity, Networking and SCADA Manager. Together, the SOC Manager and the Senior Manager provide broad coverage across time zones, so that any alert requiring human action is addressed in a timely manner - complementing the platform's continuous 24/7 automated detection.\nThe role reports to the Senior IT/OT Cybersecurity, Networking and SCADA Manager, within the Global IT & Cybersecurity (GICT) function.\nKey Responsibilities\nHuman-in-the-loop SOC operations\nSupervise day-to-day SOC operations once the AI-driven platform is operational, owning the quality and outcomes of the SOC's detection and response.\nReview and validate the AI platform's alerts, verdicts and investigations; confirm true positives, dismiss false positives with rationale, and identify cases the automation has under- or over-weighted.\nTake decisive action when human judgement is required - initiating containment, response and remediation, or authorizing/overseeing automated response actions.\nServe as the global point of accountability for the SOC's operational outcomes, maintaining situational awareness of the threat picture across the entire portfolio.\nIncident response & escalation\nLead investigation and response for escalated and high-severity incidents, coordinating with the USA-based Senior Manager, IT teams, plant O&M and external responders as needed.\nDrive incidents through the full lifecycle - triage, containment, eradication, recovery and post-incident review - with clear documentation and lessons learned.\nManage handovers between the Global coverage windows so that no incident is dropped across time zones.\nOT / ICS security monitoring\nMonitor and respond to security events affecting OT/SCADA and BESS environments across Enfinity's solar plants, applying OT-aware judgement (safety, availability and process impact, not just IT impact).\nApply and uphold relevant standards and regulatory requirements, including IEC 62443 and NIS2, in monitoring and response decisions.\nCoordinate with the OT security specialist(s) and SCADA/engineering teams on OT-specific detections and response actions.\nPlatform supervision, tuning & threat hunting\nOversee the steady-state health and effectiveness of the AI SOC platform - detection coverage, data-source/telemetry health, and integration with the XDR/SIEM and OT monitoring stack.\nContinuously tune detections and automation: feedback false positives/negatives, refine use cases and playbooks, and improve the platform's accuracy over time.\nConduct proactive threat hunting using the platform's data, going beyond automated alerts to surface stealthy or emerging threats.\nFeed recurring issues and improvement needs to the implementation/automation workstream and to vendors.\nReporting, metrics & compliance\nTrack and report SOC performance metrics (e.g. MTTD, MTTR, alert volumes, false-positive rates, incident outcomes) to the Senior Manager and GICT leadership.\nProduce incident and compliance reporting aligned to NIS2 and Enfinity's governance requirements, maintaining an auditable evidence trail.\nContribute to the continuous improvement of SOC processes, runbooks and escalation procedures.\nRequirements\nBachelor's degree in Computer Science, Information Security, Engineering or a related field (or equivalent practical experience).\nSolid experience in security operations / blue-team roles - alert triage, incident detection and response - including time spent working in or leading a SOC.\nHands-on experience with SIEM / XDR / SOAR tooling and a strong understanding of detection and response workflows; experience with AI-driven SOC automation platforms (e.g. AIStrike, Strike48, Stellar Cyber, Microsoft Sentinel) is highly valued.\nStrong incident-response skills: investigation, containment, eradication and recovery, with sound judgement on when to act and when to escalate.\nWorking knowledge of OT/ICS security and relevant standards (IEC 62443, NIS2), and an appreciation of the safety and availability priorities of industrial/renewable environments.\nComfort operating as the human-in-the-loop over an AI-driven system - able to trust automation for scale while critically validating its output and remaining accountable for outcomes.\nWillingness and ability to work within an extended / follow-the-sun coverage model (including shifted hours and on-call rotation) to complement the USA-based Senior Manager.\nStrong communication skills and professional working proficiency in English, for close coordination with the USA-based manager and global teams.\nSome supervisory or team-lead experience, with the ability to grow into managing SOC/OT analysts as the team scales.\nRelevant certifications (e.g. GCIA, GCIH, GMON, GCFA, GICSP, CISSP, or equivalent).\nExperience in energy, utilities or other critical-infrastructure environments.\nFamiliarity with agentic AI SOC platforms.\nExperience with OT network detection and industrial protocols (e.g. Modbus, DNP3, IEC 61850).\nExperience defining or maintaining SOC playbooks, runbooks and automated response workflows.\nWhy Join us?\nAt Enfinity Global you will find a dynamic, multinational environment in one of the most exciting and impactful industries. This role puts you at the centre of a modern, AI-driven security operations capability protecting critical renewable energy infrastructure - combining cutting-edge automation with the judgement of an experienced security professional. We offer competitive compensation, opportunities for professional growth, and the chance to make a real impact on climate change.","description_format":"text","description_chars":7475,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Energy Storage"],"lifecycle":[{"event":"open","at":"2026-08-17T00:00:00Z"},{"event":"close","at":"2026-10-08T11:48:31Z"},{"event":"reopen","at":"2026-10-22T07:22:58Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":10,"expected_fill_days":87,"reasons":["conf:2","win:early"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/enfinity-global-global-soc-specialist-cybersecurity","json_url":"https://alion.io/job/enfinity-global-global-soc-specialist-cybersecurity.json","meta":{"generated_at":"2026-11-02T20:49:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29156,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5764},"rest":"https://alion.io/mcp/rest/get_company?id=5764"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fenfinity-global-global-soc-specialist-cybersecurity"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fenfinity-global-global-soc-specialist-cybersecurity"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fenfinity-global-global-soc-specialist-cybersecurity"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/enfinity-global-global-soc-specialist-cybersecurity\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fenfinity-global-global-soc-specialist-cybersecurity"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":138159}},{"tool":"search_jobs","arguments":{"company":"enfinity.global","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":138159},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}