{"id":590447,"url":"https://alion.io/job/inforcer-soc-analyst-us","title":"SOC Analyst - US","company":{"id":8625,"name":"Inforcer","domain":"inforcer.com","url":"https://alion.io/company/inforcer","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":88,"open_postings":8,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":33,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Tampa, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":197000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Microsoft Entra ID","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-08T14:14:05Z","employer_posted_date":"2026-09-08","last_verified_at":"2026-10-29T04:42:32Z","board_verified":true,"closed_at":null,"days_open":50,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":50},"description":"About Us\ninforcer is one of the fastest growing technology organisations in the world and a leading provider of cutting-edge cybersecurity and AI solutions to support to the SMB market. We provide MSPs (Managed Service Providers) with the fundamental technology they need to manage and secure Microsoft 365 at scale and deliver AI services. Our mission is to be inforced in every MSP!\nAbout the Role\nWe are seeking a SOC Analyst to play a critical role in monitoring, investigating, and responding to security threats across our environment. There are two key parts to the role.\nFirstly, you will act as the front line of our security operations; reviewing alerts, identifying suspicious activity, and conducting hands-on investigations using our SIEM, EDR, and threat intelligence tools. This is an operational role with real ownership, ideal for someone who thrives in a fast-paced environment, enjoys digging into logs, and can bring clarity to complex behaviours across our network, endpoints, and cloud platforms. As part of this, you will take part in regular out-of-hours work, which is a natural component of a 24/7 security operation and compensated as overtime.\nSecondly, you will help strengthen our detection and response capabilities by improving playbooks, enhancing alert quality, and contributing insights that increase our overall readiness. As our environment grows, you’ll play a pivotal role in reducing noise, closing detection gaps, and ensuring incidents are handled quickly, consistently, and with high quality. Your work will directly support our ability to remain secure, resilient, and able to operate without interruption.\nWhat you’ll be doing\nMonitor our In-house Custom tooling for real-time alerts and suspicious activity.\n\nTriage, investigate, and document security incidents following established playbooks.\n\nPerform In-depth log analysis across our customer estate\n\nEscalate incidents as needed and collaborate with internal teams\n\nSupport containment and remediation efforts\n\nContribute to improving detection content by identifying gaps, false positives, and tuning opportunities.\n\nParticipate in threat hunting exercises and proactive investigations into anomalous behaviour.\n\nAssist with onboarding and operationalizing new security tools and processes.\n\nStay current with emerging threats, attack techniques, and security best practices.\n\nWhat We Can Offer You\nSteep Learning curve: We believe people leave organisations when learning stops. We promise a steep and continuous learning curve to both challenge and develop our people. You are responsible for your own learning, but you’ll be surrounded by exceptional people and strong enablement, if you choose to lean into it, in an environment where it’s safe to make mistakes, try new things, and improve.\nReal impact: We operate in a high-trust and autonomous environment where you can make a real impact and difference in your role and across the company.\nTransparency and Honesty: We believe honest and clear communication creates a highly collaborative culture. It gives you the “why” we make decisions and allows you to effectively make your own. We won’t pull the wool over your eyes, we are a fast-growing start-up that comes with its own unique challenges, but we all work hard to solve them, together, as a team.\nA+ Global Team: Our people power every part of our business, and we look for individuals who bring genuine passion to their role and operate at their very best. A-players thrive when surrounded by other A-players. Our level of growth and rate of change can be hard work and challenging, but you’ll be surrounded with exceptional people that are always happy to help.\nRegular Team Socials: We celebrate our team, our milestones, promotions and achievements with social events every month.\nEmployee Recognition: Programs to recognise and reward our top contributors for their achievements and efforts. We live our company values every day and reward those people who embody them.\nSkills We Need for This Role\nHands-on alert triage experience in a SOC, MSP, MSSP or internal security team.\n\nWorking KQL, you can query sign-in, audit and hunting data to answer a question unaided.\n\nStrong Microsoft 365 and Entra ID security knowledge: authentication flows, conditional access, OAuth and app consent, mailbox and delegation permissions, and the audit trail behind each.\n\nPractical understanding of MITRE ATT&CK and identity-led attack techniques against Microsoft 365.\n\nSound judgement on when evidence supports a conclusion, and the confidence to say when it does not.\n\nClear, concise written English for a technical audience, under time pressure\n\ninforcer is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.","description_format":"text","description_chars":4797,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Technology","Security Operations","Managed IT Services (MSP)"],"lifecycle":[{"event":"open","at":"2026-09-10T10:32:57Z"},{"event":"close","at":"2026-09-16T17:28:34Z"},{"event":"reopen","at":"2026-10-03T17:11:01Z"},{"event":"close","at":"2026-10-07T08:24:25Z"},{"event":"reopen","at":"2026-10-07T18:29:48Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-29T06:20:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":26,"band":"fade","label":"Fading","p_open":1,"p_active":0.576,"p_room":0.45,"age_days":50,"expected_fill_days":33,"reasons":["conf:1","velocity","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/inforcer-soc-analyst-us","json_url":"https://alion.io/job/inforcer-soc-analyst-us.json","meta":{"generated_at":"2026-10-29T06:31:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9861,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8625},"rest":"https://alion.io/mcp/rest/get_company?id=8625"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finforcer-soc-analyst-us"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finforcer-soc-analyst-us"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finforcer-soc-analyst-us"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/inforcer-soc-analyst-us\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finforcer-soc-analyst-us"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":590447}},{"tool":"search_jobs","arguments":{"company":"inforcer.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":590447},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}