{"id":3481866,"url":"https://alion.io/job/flynaut-soc-analyst","title":"SOC Analyst","company":{"id":2501824,"name":"Flynaut","domain":"flynaut.com","url":"https://alion.io/company/flynaut","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":27000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T17:27:42Z","employer_posted_date":null,"last_verified_at":"2026-10-29T17:27:42Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"SOC Analyst (Level 1 / Level 2)\n\n Pune, on-site \n Full-time \n\nAbout the role\nWe're hiring a SOC Analyst to join our Security Operations Center. You'll monitor, investigate and respond to security events across client environments, using enterprise tools and cloud platforms.\n\nThis role needs technical depth and clear communication in equal measure. During an incident, you're the person clients and internal teams hear from, and your written reports need to be as sharp as your investigations.\n\nWhat you'll do\n• Monitor alerts across SIEM, EDR, email security and DNS filtering platforms\n• Triage and investigate events, separating true and false positives with documented reasoning\n• Contain incidents using defined runbooks, and escalate Sev 1 and Sev 2 events to senior analysts and the CISO\n• Write clear incident reports for both technical teams and executives with no security background\n• Keep clients updated during active incidents: status, containment actions, next steps and timelines\n• Analyse phishing emails and report findings through defined channels\n• Analyse logs across Microsoft 365, Entra ID, AWS CloudTrail and endpoint management platforms\n• Keep ticket documentation accurate and current throughout every investigation\n• Take part in post-incident reviews and help improve runbooks\n• Track vulnerabilities and coordinate patch updates with system owners\n\nWhat we're looking for\n\nExperience\n• Level 1: 1 to 3 years in a SOC, security helpdesk or IT security role\n• Level 2: 3 to 5 years\n\nTechnical skills\n• Hands-on experience with a SIEM (Microsoft Sentinel, Splunk or similar)\n• Microsoft 365 security tools: Defender for Endpoint, Defender for Office 365, Purview Audit, Entra ID sign-in logs\n• MITRE ATT&CK and kill chain methodology\n• Networking fundamentals: DNS, HTTP/S, TCP/IP, firewall logs\n• Reading Windows Event Logs, Azure/Entra sign-in logs and email headers\n• AWS or Azure experience is a plus\n\nCommunication (non-negotiable)\n• Clear, professional written English, without jargon when the audience doesn't need it\n• Can write an incident summary a CEO can act on, and a technical timeline an engineer can follow\n• Comfortable giving live updates to clients during incidents, including delivering bad news calmly\n• Responds promptly and transparently, so stakeholders always know what's happening\n• Understands that communication during an incident is itself a security control\n\nMindset\n• Calm under pressure. No going quiet, no public speculation.\n• Curious and methodical. Follows evidence, not assumptions.\n• Owns tickets end to end and never hands off without context\n• Asks questions when scope is unclear instead of guessing\n• Works well across time zones with US and India teams\n\nPreferred certifications\n• CompTIA Security+\n• SC-200 (Microsoft Security Operations Analyst)\n• GCIH (GIAC","description_format":"text","description_chars":2831,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-29T20:10:15Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":28,"reasons":["seen:2","win:early","comp:junior"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/flynaut-soc-analyst","json_url":"https://alion.io/job/flynaut-soc-analyst.json","meta":{"generated_at":"2026-11-02T04:26:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6512,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2501824},"rest":"https://alion.io/mcp/rest/get_company?id=2501824"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflynaut-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflynaut-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflynaut-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flynaut-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflynaut-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3481866}},{"tool":"search_jobs","arguments":{"company":"flynaut.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3481866},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}