{"id":2585429,"url":"https://alion.io/job/george-bernard-threat-operations-analyst","title":"Threat Operations Analyst","company":{"id":4423584,"name":"George Bernard","domain":"georgebernard.co","url":"https://alion.io/company/georgebernard","size_band":"1001-5000","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Manatal","truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Colombo, Sri Lanka"],"countries":["LK"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":25000,"max_usd":74000,"period":"year","method":null,"sample_n":4941},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Censys","optional":false},{"name":"CVE","optional":false},{"name":"CVSS","optional":false},{"name":"DNS","optional":false},{"name":"Nuclei","optional":false},{"name":"Shodan","optional":false},{"name":"TCP/IP","optional":false}],"status":"live","first_seen_at":"2026-10-15T03:42:37Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-15T19:28:18Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Threat and Vulnerability Analysis\nReview and analyse threats, risks, and vulnerabilities surfaced by the\nResearch Team and cyber detection pipelines.\nValidate the presence of exposed services (e.g., RDP, SSH, databases, edge devices) using platforms such as Shodan, Censys, LeakIX, and Nuclei scans.\nEvaluate security configurations to determine whether mitigating controls or compensating measures are in place.\nAsset Verification and Attribution\nConfirm internet-facing asset ownership using WHOIS, DNS lookups, reverse- DNS checks, TLS fingerprinting, Shodan datasets, and related OSINT techniques.\nResolve attribution uncertainties, ensuring customers only receive notifications for confirmed assets.\nCustomer Notification and Advisory Work\nProduce clear and concise security alerts, including explanations of the issue, affected assets, recommended remediation steps, and references to vendor guidance.\nCommunicate directly with customers and brokers to explain findings, clarify risks, and guide remediation priorities where necessary.\nInternal Collaboration and Escalation\nAct as a technical escalation point for Customer Support, Underwriting, and Claims teams.\nInvestigate inbound queries relating to exposed services, flagged vulnerabilities, potential false positives, or disputed asset ownership.\nContribute technical insight to improve internal processes, detection workflows, and knowledge sharing across teams.\nOperational Excellence\nMaintain a high standard of customer service, ensuring communications are professional, timely, and approachable.\nAssist in tuning detection logic and improving the accuracy of vulnerability and exposure matching.\nSupport the continuous improvement of intelligence capabilities and processes.\nRequired Skills and Knowledge\nStrong understanding of networking fundamentals (TCP/IP, ports, protocols, common services).\nFamiliarity with cyber security terminology (CVE, CVSS, threat actor TTPs, exploitation lifecycle, attack surface concepts).\nHands-on experience using internet scanning or exposure assessment tools (e.g., Shodan, Censys, LeakIX, Nuclei).\nAbility to interpret DNS records, WHOIS data, HTTP response headers, and other OSINT artefacts.\nAble to break down complex technical issues into clear, customer-friendly language.\nProven track record in an MSSP, SOC, threat monitoring or security operations role.\nExperience triaging or validating vulnerabilities, exposures, misconfigurations, or security alerts.\nCertifications (Desired but Not Essential)\nCompTIA Security+ (or equivalent vendor-neutral foundational certifications).\nOther relevant certifications (e.g., Network+, CySA+, GIAC, eLearnSecurity, or similar) welcomed.","description_format":"text","description_chars":2686,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-15T03:42:37Z"}],"visa":[],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":20,"reasons":["conf:2","agency","win:early","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/george-bernard-threat-operations-analyst","json_url":"https://alion.io/job/george-bernard-threat-operations-analyst.json","meta":{"generated_at":"2026-10-15T22:38:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34376,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4423584},"rest":"https://alion.io/mcp/rest/get_company?id=4423584"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgeorge-bernard-threat-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgeorge-bernard-threat-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgeorge-bernard-threat-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/george-bernard-threat-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgeorge-bernard-threat-operations-analyst"}]}