{"id":3308604,"url":"https://alion.io/job/happiest-minds-technical-lead-soc-2","title":"TECHNICAL LEAD - SOC 2","company":{"id":59391,"name":"Happiest Minds","domain":"happiestminds.com","url":"https://alion.io/company/happiest-minds","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":58000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"Anomali","optional":false},{"name":"IBM QRadar","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Recorded Future","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false}],"status":"live","first_seen_at":"2026-10-26T23:26:46Z","employer_posted_date":null,"last_verified_at":"2026-10-26T23:26:46Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Threat Intelligence and Advisory Management\nThreat Sources Covered\nMonitor, aggregate, and analyze threat intelligence and advisories from multiple sources, including but not limited to:\nCommercial Threat Intelligence Platforms (e.g., Anomali, Recorded Future)\nVendor Security Advisories (e.g., Microsoft, Cisco, Palo Alto, Akamai)\nGovernment and CERT Alerts (e.g., UAE CERT, US-CERT, ENISA)\nThreat feeds from SOC and SIEM/SOAR platforms\nCrowd-sourced threat platforms and Bug Bounty findings (e.g., Bugcrowd)\nOpen-source intelligence (OSINT) sources\nDark Web intelligence sources (where applicable)\nInternal threat hunting findings\nPartner advisories and industry-specific alerts.\nGeneral Service Requirements\nMaintain continuous monitoring and validation of incoming threat intelligence.\nAnalyze the potential impact of threats on the Group's infrastructure, applications, users, and data.\nPrioritize threat advisories based on business relevance, criticality, and risk exposure.\nProvide actionable threat advisories with mitigation recommendations.\nIntegrate threat intelligence outputs with SOC, Incident Response, and Vulnerability Management processes.\nEnsure threat intelligence-driven response activities are tracked, actioned, and closed.\nDevelop and maintain threat advisory and intelligence playbooks for standardized processes.\nThreat Detection and Collection\nCollect and normalize threat advisories and intelligence feeds.\nValidate the authenticity and credibility of threat sources.\nRemove noise and false positives to focus on credible and impactful threats.\nThreat Analysis and Prioritization\nPerform enrichment on threat data using internal telemetry and external datasets.\nCorrelate identified threats with the Group's asset inventory and critical systems.\nPrioritize threats based on risk to the business (high, medium, low impact).\nThreat Advisory Notification and Actioning\nPrepare clear, actionable threat advisories including: Threat description\nPotential impact\nAffected systems/services\nRecommended immediate and long-term mitigation actions\n\nDisseminate advisories to relevant stakeholders (e.g., IT, Security Operations, Business Units).\nRaise Threat Advisory Tickets (TA Tickets) where action is required.\nAssign and track closure of mitigation actions within agreed timelines.\nThreat Intelligence Playbooks\nDevelop structured playbooks for threat collection, validation, analysis, dissemination, and response.\nEnsure continuous updating of playbooks based on evolving threat landscapes and operational lessons learned.\nAlign playbooks with MITRE ATT&CK, NIST, and other cybersecurity frameworks where applicable.\nThreat Campaign Monitoring\nIdentify ongoing threat campaigns targeting the Group's sector or geography.\nProvide early warnings on advanced persistent threats (APTs), ransomware groups, and significant actors.\nRecommend preventive and defensive measures based on observed campaigns.\nThreat Hunting Support\nUse threat intelligence to proactively identify indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs) that could already exist in the environment.\nSupport threat hunting activities based on high-fidelity threat intelligence and emerging threat patterns.\nThreat intelligent Platform Management & Operations\nPerform daily, weekly, and monthly operational health checks.\nMaintain and update threat intelligence feeds (commercial, open-source, and internal).\nPerform platform upgrades, patches, and system tuning.\nEnsure high availability and business continuity configurations are in place.\nMonitor and manage platform performance and storage utilization.\nManage user access, roles, and permissions according to governance policies.\nEnable role-based dashboards for SOC, IR, Threat Hunting, and Management.\nConduct quarterly access reviews.\nIntegrate various threat intelligence feeds (e.g., STIX/TAXII, MISP, ISACs).\nValidate, de-duplicate, and normalize intelligence data.\nPrioritize threat indicators based on relevance to the organization.\nRegular review and curation of feeds for noise reduction and enrichment.\nIntegrate TIP with SIEM (e.g., QRadar, Splunk), SOAR, EDR, firewall, and other security controls.\nAutomate indicator enrichment and correlation in SOC tools.\nEnable automated blocking of high-confidence IOCs in firewalls or proxy solutions.\nDevelop and maintain integration of playbooks and dataflow documentation.","description_format":"text","description_chars":4400,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Compliance","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-27T02:09:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":27,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/happiest-minds-technical-lead-soc-2","json_url":"https://alion.io/job/happiest-minds-technical-lead-soc-2.json","meta":{"generated_at":"2026-10-29T02:12:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3323,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59391},"rest":"https://alion.io/mcp/rest/get_company?id=59391"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhappiest-minds-technical-lead-soc-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhappiest-minds-technical-lead-soc-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhappiest-minds-technical-lead-soc-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/happiest-minds-technical-lead-soc-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhappiest-minds-technical-lead-soc-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3308604}},{"tool":"search_jobs","arguments":{"company":"happiestminds.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3308604},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}