{"id":3425245,"url":"https://alion.io/job/inallmedia-2029-security-operations-analyst","title":"2029 Security Operations Analyst","company":{"id":4431647,"name":"InAllMedia","domain":"inallmedia.com","url":"https://alion.io/company/inallmedia","size_band":null,"is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":{"grade":"B","score":75,"open_postings":35,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":{"label":"ET","utc_offset_min":-5,"utc_offset_max":-5},"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["BR"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":109000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"SIEM","optional":false},{"name":"AWS","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Google SecOps","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"Python","optional":true},{"name":"SentinelOne","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-08-24T10:46:19Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-11-03T01:29:18Z","board_verified":true,"closed_at":null,"days_open":70,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":70},"description":"Position: Senior Security Operations (SOC) Analyst (Off-Hours)\nLocation: Remote\nContract Type: Full-time vendor (Direct contract with Inallmedia.com)\nTime Zone Alignment: Eastern Time (ET) / Evening & Overnight Coverage\nAbout Inallmedia.com\nInallmedia.com is a global technology and design firm focused on building impactful digital solutions through remote, distributed teams across LATAM. We partner with international clients across industries, providing long-term technical expertise, product innovation, and team augmentation.\nProject Overview\nYou will join a high-performing cybersecurity team expanding its Security Operations capability toward a 24x7 operating model for a major international client. As a Senior SOC Analyst, your primary focus will be extending daytime Security team coverage during evening and overnight weekday hours. Because first-level monitoring capabilities are already established, you will operate at a senior (L2/L3) level-owning escalated security events, driving incident response, and using lower-volume periods to improve detection engineering, threat hunting, and SOAR automation.\nKey Responsibilities\nOff-Hours Incident Management: Own escalated security events from initial triage through resolution, containment, or senior escalation during weekday evening and overnight hours.\nMulti-Layered Investigation: Investigate complex activity across SIEM, EDR, identity, network, and email security tools while accurately distinguishing false positives from true security incidents.\nDocumentation & Shift Handoffs: Maintain clear, detailed documentation of security events and lead structured shift handoffs for seamless transition with the daytime SecOps team.\nDetection Tuning & False-Positive Reduction: Analyze alert patterns during lower-volume periods to refine rules and optimize detection logic.\n Automation & Playbooks: Identify opportunities for security automation (SOAR) and contribute to continuous playbook improvements.\nBacklog Delivery & Threat Hunting: Proactively drive SecOps backlog initiatives, including threat hunting hypotheses and operational capability upgrades.\nMust-Have Skills\n Experience Level: 5+ years of relevant experience in cybersecurity and Security Operations (SOC) environments.\nIncident Response & SIEM: Deep expertise in SIEM investigation, end-to-end incident response, and triage of complex security events.\n Endpoint Fundamentals: Strong proficiency in Endpoint Detection and Response (EDR) platforms and endpoint security fundamentals.\nAutonomy & Analytical Rigor: Excellent troubleshooting skills with the ability to work independently and make sound containment decisions under limited supervision.\nOperational Drive: Proactive mindset focused on identifying operational bottlenecks and driving continuous SecOps improvements.\nEnglish Proficiency: Fluent spoken and written English for shift handoffs, reporting, and team collaboration.\nNice-to-Have Skills\nTooling & Platforms: Direct experience with Splunk / Splunk ES / Splunk SOAR, SentinelOne, CrowdStrike, Microsoft Defender, or Google SecOps.\nDetection & Frameworks: Experience in detection engineering, rule tuning, threat hunting, and applying the MITRE ATT&CK framework.\nAutomation & Scripting: Proficiency in Python or general scripting alongside hands-on SOAR integration experience.\n Cloud & Vulnerability Management: Exposure to AWS/Cloud security environments and vulnerability management tools like Tenable.\nTime Zone & Collaboration\nThis role requires dedicated coverage during weekday evening and overnight hours aligned with US Eastern Time (ET).\nLanguage\nAll interviews, documentation, and daily communication will be in English.","description_format":"text","description_chars":3681,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Brazil","iso":"BR","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-28T22:14:00Z"}],"visa":[],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.361,"p_room":0.28,"age_days":69,"expected_fill_days":29,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/inallmedia-2029-security-operations-analyst","json_url":"https://alion.io/job/inallmedia-2029-security-operations-analyst.json","meta":{"generated_at":"2026-11-03T03:29:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4685,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4431647},"rest":"https://alion.io/mcp/rest/get_company?id=4431647"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finallmedia-2029-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finallmedia-2029-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finallmedia-2029-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inallmedia-2029-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finallmedia-2029-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3425245}},{"tool":"search_jobs","arguments":{"company":"inallmedia.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3425245},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}