{"id":2228271,"url":"https://alion.io/job/hcltech-sr-engineer-support-operations-6","title":"Sr Engineer (Support & Operations)","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Assembly","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Prisma Cloud","optional":true},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-10-10T17:23:42Z","employer_posted_date":"2026-10-10","last_verified_at":"2026-10-11T21:16:48Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Summary\nJob Summary : Department: Security Operations Center (SOC) Experience Level: 1-3 Years Employment Type: Full-time Position Overview We are seeking a detail-oriented and proactive SOC Analyst with 1-3 years of hands-on security operations experience to join our team. In this role, you will serve as a core defender of our digital assets, utilizing Palo Alto Networks Cortex XSIAM to monitor, triage, investigate, and respond to security threats across our network, endpoints, cloud, and identity infrastructure. The ideal candidate understands modern threat landscapes, possesses strong analytical skills, and leverages automation and telemetry to reduce mean time to detect (MTTD) and mean time\nKey Responsibilities\nJob Responsibilities : 1. Incident Triage & Response\nMonitor and analyze security alerts, events, and incidents within Palo Alto Cortex XSIAM across endpoint, network, cloud, and identity telemetry sources.\nConduct initial alert triage to differentiate between true positives and false positives, escalating complex threats when necessary.\nPerform root cause analysis, risk assessment, and scope determination for verified security incidents.\nExecute containment, mitigation, and remediation actions (e.g., endpoint isolation, user credential resets, IP blocking).\n2. XSIAM Operations & Analysis\nQuery and correlate security data across diverse data sources using Cortex Query Language (XQL).\nValidate and maintain Cortex XDR agent health across enterprise endpoints.\nInteract with automated SOAR playbooks to accelerate incident resolution and streamline repetitive tasks.\nLeverage Attack Surface Management (ASM) and Identity Threat Detection & Response (ITDR) modules within XSIAM to identify vulnerabilities and identity risks.\n3. Threat Detection & Intelligence\nMap observed adversary behaviors and indicators of compromise (IOCs) to the MITRE ATT&CK; framework.\nIntegrate threat intelligence feeds into detection workflows to proactively hunt for emerging cyber threats.\nAssist senior analysts in fine-tuning detection rules and playbook workflows to minimize noise and improve response fidelity.\n4. Documentation & Collaboration\nMaintain detailed incident logs, ticket updates, and post-incident reports with actionable mitigation recommendations.\nCollaborate closely with IT Infrastructure, Cloud, Engineering, and DevOps teams during security incidents.\nSkill Requirements\nSkill Requirement : Core Experience & Certifications\n1 to 3 years of experience working in a Security Operations Center (SOC) or Incident Response environment.\nDirect experience using Palo Alto Networks Cortex XSIAM or Cortex XDR.\nRelevant industry certifications (at least one preferred):\nPalo Alto Networks Certified XSIAM Analyst or PCDRA (Palo Alto Networks Certified Detection and Remediation Analyst)\nCompTIA Security+, CySA+, or GIAC (GSEC/GCIH) Technical & Security Focus Skills\nSIEM / XDR / SOAR: Understanding of log ingestion, correlation, alert grouping, and playbook execution within XSIAM.\nQuerying Languages: Hands-on ability to write and modify XQL (Cortex Query Language) or similar SIEM query languages (KQL, SPL).\nNetworking & Protocols: Solid grasp of TCP/IP, DNS, HTTP/S, VPNs, firewalls, and proxy architecture.\nOperating Systems & Endpoints: Working knowledge of Windows (Registry, Event Logs), Linux, and macOS internal security mechanisms.\nAttack Frameworks: Strong understanding of the MITRE ATT&CK; framework, Cyber Kill Chain, and common vector entry tactics (phishing, drive-by downloads, credential stuffing).\nIdentity & Cloud Security: Familiarity with Active Directory, Microsoft Entra ID (Azure AD), SSO, MFA, and general AWS/Azure security concepts.\nScripting (Plus): Basic proficiency in Python or PowerShell for basic automation and log parsing.\nOther Requirements\nOther Requirement : Soft Skills\nStrong problem-solving and critical-thinking abilities under pressure.\nExcellent clear verbal and written technical reporting skills.\nAbility to work effectively in shift/rotational monitoring operational environments. Preferred / Nice-to-Have Skills\nExperience with Palo Alto Next-Generation Firewalls (NGFW) or Prisma Cloud integrations.\nExperience participating in basic threat hunting or tabletop incident response exercises.\nExposure to forensic artifact collection (memory dumps, PCAP analysis).","description_format":"text","description_chars":4345,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-10T17:23:42Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":22,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-10-11T22:57:38Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-sr-engineer-support-operations-6","json_url":"https://alion.io/job/hcltech-sr-engineer-support-operations-6.json","meta":{"generated_at":"2026-10-11T22:57:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13280,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-sr-engineer-support-operations-6"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-sr-engineer-support-operations-6"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-sr-engineer-support-operations-6"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-sr-engineer-support-operations-6\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-sr-engineer-support-operations-6"}]}