{"id":135147,"url":"https://alion.io/job/ensign-infosecurity-senior-security-analyst-soc-level-3","title":"Senior Security Analyst (SOC Level 3)","company":{"id":50230,"name":"Ensign InfoSecurity","domain":"ensigninfosecurity.com","url":"https://alion.io/company/ensign-infosecurity","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"C","score":68,"open_postings":53,"ghost_share":0.623,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":42000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2225},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-04-30T00:00:00Z","employer_posted_date":"2026-04-30","last_verified_at":"2026-10-21T06:22:27Z","board_verified":true,"closed_at":null,"days_open":174,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":174},"description":"Ensign is hiring !\nKey Responsibilities:\nLead high-severity incident response and containment activities, coordinating with stakeholders across IT and business units.\n\nConduct in-depth forensic analysis on endpoints, networks, and logs to determine the root cause and impact of security incidents.\n\nDevelop advanced detection use cases and correlation rules based on threat intelligence and TTPs (MITRE ATT&CK, etc.).\n\nPerform proactive threat hunting using SIEM, EDR, and threat intel feeds to uncover undetected threats.\n\nReview and fine-tune alerts, playbooks, and automation workflows to reduce false positives and improve SOC efficiency.\n\nMentor L1 and L2 analysts, providing guidance, training, and quality review of investigations.\n\nServe as a technical escalation point for complex security issues and investigations.\n\nContribute to incident post-mortems and provide recommendations to improve security posture and processes.\n\nCollaborate with red/purple teams and engineering to simulate attacks and validate defense effectiveness.\n\nRequirements:\nEducation & Certification:\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.\n\nStrongly preferred certifications:\nGIAC (GCFA, GCIH, GCIA, GDAT)\n\nCISSP, OSCP, or equivalent\n\nTechnical Skills:\nDeep understanding of security monitoring and detection tools (SIEM, EDR, IDS/IPS, SOAR).\n\nStrong hands-on experience in forensic tools, log analysis, malware analysis, and packet inspection.\n\nSolid grasp of attacker tactics, techniques, and procedures (TTPs), threat modeling, and behavior analytics.\n\nFamiliarity with scripting or automation (Python, PowerShell, Bash) is an advantage.\n\nExperience with Windows, Linux, and cloud environments (AWS/Azure security monitoring).\n\nSoft Skills:\nExcellent analytical and problem-solving skills.\n\nStrong written and verbal communication, including report writing.\n\nAbility to lead investigations and influence cross-functional teams under pressure.\n\nPreferred Experience:\n4-6+ years of experience in SOC operations, incident response, or threat detection.\n\nExperience working in or leading incident response within a 24x7 SOC or MSSP environment.\n\nPrior involvement in threat hunting or red/purple team collaboration is a strong plus.","description_format":"text","description_chars":2272,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-04-30T00:00:00Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.164,"p_room":0.28,"age_days":174,"expected_fill_days":9,"reasons":["conf:8","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/ensign-infosecurity-senior-security-analyst-soc-level-3","json_url":"https://alion.io/job/ensign-infosecurity-senior-security-analyst-soc-level-3.json","meta":{"generated_at":"2026-10-21T10:48:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15268,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50230},"rest":"https://alion.io/mcp/rest/get_company?id=50230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensign-infosecurity-senior-security-analyst-soc-level-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensign-infosecurity-senior-security-analyst-soc-level-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensign-infosecurity-senior-security-analyst-soc-level-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensign-infosecurity-senior-security-analyst-soc-level-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensign-infosecurity-senior-security-analyst-soc-level-3"}]}