{"id":3376659,"url":"https://alion.io/job/harris-sr-it-cyber-defense-analyst","title":"Sr IT Cyber Defense Analyst","company":{"id":4012751,"name":"Harris","domain":"harris.io","url":"https://alion.io/company/harris-io","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":96000,"max_usd":199000,"period":"year","method":"global_role_seniority_cell","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Linux","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-28T00:48:13Z","employer_posted_date":null,"last_verified_at":"2026-10-28T00:48:13Z","board_verified":false,"closed_at":null,"days_open":5,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":5},"description":"Senior IT Cyber Defense Analyst (Shift Lead)\nAI-Enabled Security Operations | 24/7 SOCLocation: Remote – Pune/Baroda, IndiaDepartment: IT Cybersecurity – Security Operations Center (SOC)\nReports To: SOC ManagerWork Schedule: 24/7 rotational shifts\nAbout the RoleWe are seeking an experienced Senior IT Cyber Defense Analyst (Shift Lead) to lead day-to-day SOC operations, oversee security investigations, coordinate incident response, and mentor SOC analysts. The ideal candidate will bring strong SIEM/EDR expertise, advanced threat investigation skills, and hands-on experience using AI/LLM tools and automation to improve SOC efficiency and detection capabilities.\nKey Responsibilities\nLead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence.\n\nInvestigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity.\n\nConduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework.\n\nDevelop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL.\n\nUse approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation; independently validate AI-generated outputs.\n\nAutomate repetitive SOC tasks using Python, PowerShell, APIs, or SOAR capabilities.\n\nMentor analysts, improve investigation quality, reduce false positives, and maintain accurate incident documentation and audit-ready evidence.\n\nCoordinate with Incident Response, IT, Endpoint, Network, and Cloud teams to support containment, remediation, and recovery.\n\nRequired Skills and Qualifications\nBachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience.\n\n5+ years of experience in SOC, cyber defense, or incident response, including shift leadership, incident coordination, or analyst mentoring.\n\nStrong hands-on experience with SIEM, EDR/XDR, incident investigation, and threat detection.\n\nProficiency in Microsoft Sentinel and KQL; experience with Microsoft Defender, CrowdStrike, or similar security platforms.\n\nStrong understanding of networking, Windows/Linux, identity security, email threats, and MITRE ATT&CK.\n\nMandatory practical AI/LLM proficiency, including prompt engineering, AI-assisted investigations, validation of AI-generated queries/scripts, and awareness of hallucinations, prompt injection, and data privacy risks.\n\nScripting or automation experience using Python, PowerShell, APIs, or SOAR tools.\n\nStrong analytical, communication, decision-making, and team leadership skills; willingness to work in a 24/7 rotational shift environment.\n\nPreferred Qualifications\nCertifications such as Microsoft SC-200, CompTIA CySA+, GCIH, or relevant SIEM/EDR vendor certifications.\n\nExperience in proactive threat hunting, detection engineering, cloud security, and SOC process improvement.\n\nWhat Success Looks Like\nEffective shift leadership and timely, high-quality incident handling.\n\nImproved detection coverage, investigation efficiency, and reduced false positives.\n\nPractical adoption of AI and automation to reduce repetitive work while maintaining security, accuracy, and human oversight.\n\nStrong analyst development, documentation, and operational consistency.\n\nOriginally posted on Himalayas","description_format":"text","description_chars":3457,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-28T02:28:30Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":29,"reasons":["seen:4","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/harris-sr-it-cyber-defense-analyst","json_url":"https://alion.io/job/harris-sr-it-cyber-defense-analyst.json","meta":{"generated_at":"2026-11-02T01:23:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2120,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4012751},"rest":"https://alion.io/mcp/rest/get_company?id=4012751"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fharris-sr-it-cyber-defense-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fharris-sr-it-cyber-defense-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fharris-sr-it-cyber-defense-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/harris-sr-it-cyber-defense-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fharris-sr-it-cyber-defense-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3376659}},{"tool":"search_jobs","arguments":{"company":"harris.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3376659},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}