{"id":135146,"url":"https://alion.io/job/ensign-infosecurity-soc-developer","title":"SOC Developer","company":{"id":50230,"name":"Ensign InfoSecurity","domain":"ensigninfosecurity.com","url":"https://alion.io/company/ensign-infosecurity","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":73,"open_postings":51,"ghost_share":0.529,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":9,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Hardware","role_family":"Hardware","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kuala Lumpur, Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":42000,"period":"year","method":null,"sample_n":3689},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"IBM QRadar","optional":false},{"name":"JavaScript","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-04-30T00:00:00Z","employer_posted_date":"2026-04-30","last_verified_at":"2026-10-17T08:51:33Z","board_verified":true,"closed_at":null,"days_open":170,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":170},"description":"Ensign is hiring !\nKey Responsibilities:\nDevelop, customize, and maintain security monitoring content for SIEM and SOAR platforms (e.g., custom rules, alerts, correlation searches, dashboards).\n\nBuild automation playbooks for incident response using SOAR platforms to reduce response time and analyst workload.\n\nIntegrate new data sources into SIEM tools and ensure parsing, normalization, and enrichment.\n\nCreate and maintain scripts and tools to support threat detection, investigation, and reporting.\n\nWork with SOC Analysts and Threat Hunters to develop new detection use cases and improve existing ones.\n\nParticipate in the threat lifecycle, assisting in the development of detection logic based on threat intel and attack techniques (e.g., MITRE ATT&CK).\n\nCollaborate with infrastructure and application teams to ensure proper logging and telemetry.\n\nMaintain documentation of code, detection logic, use case coverage, and automation workflows.\n\nRequirements:\nEducation & Certification:\nBachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field.\n\nCertifications such as GIAC GMON, GCDA, GCIA, or equivalent are an advantage.\n\nTechnical Skills:\nStrong experience with SIEM technologies (e.g., Splunk, QRadar, ELK).\n\nExperience with SOAR platforms (e.g., Cortex XSOAR, Splunk Phantom, IBM Resilient).\n\nProficiency in scripting and development languages such as Python, JavaScript, or Bash.\n\nFamiliarity with REST APIs, JSON, and integration methods.\n\nUnderstanding of cybersecurity concepts, attack techniques, and defensive strategies.\n\nFamiliarity with MITRE ATT&CK, cyber threat intelligence, and incident handling workflows.","description_format":"text","description_chars":1668,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-04-30T00:00:00Z"}],"visa":[],"liveness":{"score":2,"band":"cold","label":"Long shot","p_open":1,"p_active":0.066,"p_room":0.28,"age_days":170,"expected_fill_days":9,"reasons":["conf:0","stale_co","velocity","ghost","win:tail","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/ensign-infosecurity-soc-developer","json_url":"https://alion.io/job/ensign-infosecurity-soc-developer.json","meta":{"generated_at":"2026-10-17T12:10:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16080,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50230},"rest":"https://alion.io/mcp/rest/get_company?id=50230"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fensign-infosecurity-soc-developer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fensign-infosecurity-soc-developer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fensign-infosecurity-soc-developer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ensign-infosecurity-soc-developer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fensign-infosecurity-soc-developer"}]}