{"id":2550612,"url":"https://alion.io/job/everise-specialist-information-security","title":"Specialist - Information Security","company":{"id":3843924,"name":"Everise","domain":"weareeverise.com","url":"https://alion.io/company/everise-2","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":13500,"max_usd":33000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Acunetix","optional":false},{"name":"Amazon Aurora","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BloodHound","optional":false},{"name":"Burp Suite","optional":false},{"name":"Checkmarx","optional":false},{"name":"DLP","optional":false},{"name":"Fortify","optional":false},{"name":"FortiGate","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Invicti","optional":false},{"name":"Metasploit","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Nessus","optional":false},{"name":"NetExec","optional":false},{"name":"Nmap","optional":false},{"name":"OpenVAS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PingCastle","optional":false},{"name":"Postman","optional":false},{"name":"Prowler","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"ScoutSuite","optional":false},{"name":"Semgrep","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Snyk","optional":false},{"name":"SonarQube","optional":false},{"name":"Splunk","optional":false},{"name":"Veracode","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false}],"status":"live","first_seen_at":"2026-10-08T00:00:00Z","employer_posted_date":"2026-10-08","last_verified_at":"2026-10-15T02:43:10Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Company Overview\nJoin us on our mission to elevate customer experiences for people around the world. As a member of the Everise family, you will be part of a global experience company that believes in being people-first, celebrating diversity and incubating innovation. Our dedication to our purpose and people is being recognized by our employees and the industry. Our 4.6/5 rating on Glassdoor and our shiny, growing wall of Best Place to Work awards is a testament to our investment in our culture. Through the power of diversity, we celebrate all cultures for their uniqueness and strengths. With 13 centers around the world and a robust work at home program, we believe great things happen when we work with people who think differently from us. Find a job you’ll love today!\nCore responsibilities across SOC monitoring, VAPT execution, and evidence management include the following:\nMonitor SOC queues and investigate alerts from Managed SOC/SIEM, endpoint, identity, email-security, DLP, VPN/proxy and endpoint-compliance sources.\nEnrich SOC alerts using user, device, IP, ASN, geo-location, application, timestamp, IOC, endpoint posture, related tickets and historical evidence.\nDocument investigations with working notes, screenshots, containment status, closure rationale, ticket updates and shift handover notes.\nExecute scheduled and ad hoc vulnerability scans for infrastructure and applications; validate findings before escalation.\nPerform web application and API security testing under defined scope; mobile application testing is excluded unless separately assigned in the future.\nReview SAST/DAST findings, assist with secure-code review and coordinate with application/development owners for remediation evidence.\nTrack vulnerability remediation and retesting in ServiceNow or approved workflow tools; maintain clean closure, retest and exception evidence.\nSupport containment actions including account disablement, device freeze/quarantine/isolation, suspicious-session review, user outreach and restoration evidence.\nPrepare SOC monitoring inputs and VAPT status inputs including open vulnerabilities, overdue remediation, retest outcomes, repeat findings and escalation items.\nProvide security evidence from SOC/VAPT work when requested for audit/client/security review; do not own GRC program activities.\nEnsure SOC alerts are triaged consistently with evidence, classification, escalation notes and closure rationale (success measure).\nValidate, document and track infrastructure, web/API and SAST/DAST findings through remediation or retest (success measure).\nEscalate high-risk identity, endpoint, email, DLP, vulnerability and VPN/proxy events without delay (success measure).\nMaintain ServiceNow/security tickets that are complete, evidence-backed and aligned to SOC/VAPT operating expectations (success measure).\nAttributes & Attitude\n\nHands-on investigative mindset with the discipline to perform practical triage and testing, not only ticket monitoring or scanner-output forwarding.\nStrong escalation discipline - knows when and how to escalate to Consultant/InfoSec lead, IT Ops, GSD, Endpoint, Development, HR/Ops, TAM or Legal based on severity and impact.\nMeticulous evidence and retesting hygiene, consistently capturing screenshots, timestamps, tool outputs, reproduction steps and closure comments.\nClear, business-formal written communication for incident notes, vulnerability findings, remediation follow-ups and shift handovers.\nComfortable operating across a hybrid scope - balancing SOC alert response with VAPT execution within the same role.\nCollaborative approach when coordinating with application/development owners, IT Ops and cross-functional teams on remediation evidence.\nOwnership and accountability for closure quality, without extending into GRC program ownership.\nAdaptable and detail-oriented, able to brief a Consultant/InfoSec lead with concise facts and risk indicators.\nKnowledge\nQualifications: Minimum 3-5 years of experience and working knowledge across the following areas:\nSOC Operations: 3-5 years in SOC, MDR, InfoSec operations, endpoint security, vulnerability management or security monitoring support; BPO, healthcare, PCI or client-regulated environment exposure preferred.\nVulnerability Assessment: Ability to run scans, validate vulnerabilities, capture evidence, prepare remediation notes and support retesting; Nessus/Qualys/OpenVAS and ServiceNow remediation tracking experience preferred.\nWeb/API Testing: Working knowledge of OWASP Top 10, web/API testing methodology and manual validation using Burp Suite or OWASP ZAP; experience preparing concise technical finding write-ups preferred.\nSAST/DAST/Code Review: Ability to review tool findings, understand vulnerable code patterns and coordinate with developers under senior guidance; familiarity with SonarQube, Snyk, Semgrep, Checkmarx, Veracode or Fortify preferred.\nCommunication and Evidence: Clear business-formal writing for incident notes, vulnerability findings, remediation follow-ups and shift handovers; able to brief a Consultant/InfoSec lead with concise facts and risk indicators.\nSIEM/MDR Tooling: Arctic Wolf/Aurora, Microsoft Sentinel or equivalent SIEM, Splunk/QRadar fundamentals, ServiceNow ticketing and IOC enrichment workflows.\nIdentity/Endpoint Tooling: Microsoft Entra ID, Conditional Access, MFA, Defender for Endpoint, FortiEDR, Absolute, Intune/JamF, BitLocker/FileVault and endpoint evidence capture.\nEmail/DLP Tooling: Abnormal AI / O365 email security, Microsoft Purview DLP, phishing/BEC/ATO investigation queues and remediation evidence.\nNetwork Vulnerability Tools: Nessus, Qualys, OpenVAS, Nmap, basic Metasploit validation, Wireshark and SSL/TLS testing tools.\nAD/Windows Exposure Awareness: BloodHound, PingCastle and NetExec/CrackMapExec awareness for privilege path, misconfiguration and exposure validation under supervision.\nWeb/API Testing Tools: Burp Suite, OWASP ZAP, Postman, API collections and manual validation for authentication, authorization, session and input-handling issues.\nSAST Tools: Checkmarx, Veracode, SonarQube, Fortify, Snyk, Semgrep or equivalent; ability to read code paths and identify likely vulnerable patterns.\nDAST Tools: Burp Suite, OWASP ZAP, Acunetix, Invicti/Netsparker, AppScan or equivalent; validate output before raising remediation tickets.\nCloud Security Basics: Microsoft Defender for Cloud / Azure posture review basics, AWS exposure awareness, Prowler/ScoutSuite-style output interpretation where applicable.\nConnectivity Context: FortiSASE, FortiGate, VPN, IPQS/IP2Proxy or equivalent tools for VPN/proxy/geolocation validation.\n Desirable Certifications: eJPT / PNPT / CEH Practical, CompTIA PenTest+ / Security+ / CySA+, Burp Suite certification or web testing training, Splunk Core / SIEM fundamentals - all Good to Have.\nIf you’ve got the skills to succeed and the motivation to make it happen, we look forward to hearing from you.","description_format":"text","description_chars":6949,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Business Process Outsourcing (BPO)","Call Center Services"],"lifecycle":[{"event":"open","at":"2026-10-14T17:50:41Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.856,"p_room":1,"age_days":7,"expected_fill_days":24,"reasons":["conf:1","win:early"],"computed_at":"2026-10-15T03:55:38Z"},"pay":null,"html_url":"https://alion.io/job/everise-specialist-information-security","json_url":"https://alion.io/job/everise-specialist-information-security.json","meta":{"generated_at":"2026-10-15T03:55:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5572,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3843924},"rest":"https://alion.io/mcp/rest/get_company?id=3843924"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Feverise-specialist-information-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Feverise-specialist-information-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Feverise-specialist-information-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/everise-specialist-information-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Feverise-specialist-information-security"}]}