{"id":2902647,"url":"https://alion.io/job/infra360-secops-engineer-security-operations-soc-engineer","title":"SecOps Engineer / Security Operations / SOC Engineer","company":{"id":3808104,"name":"Infra360","domain":"infra360.io","url":"https://alion.io/company/infra360","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":800000,"max":1000000,"currency":"INR","period":"year","gross":null,"usd_annual":10586},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"FinOps","optional":false},{"name":"GCP","optional":false},{"name":"Google SecOps","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Wazuh","optional":false},{"name":"Windows","optional":false},{"name":"Kubernetes","optional":true},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-09-30T10:25:01Z","employer_posted_date":"2026-09-30","last_verified_at":"2026-10-21T04:10:46Z","board_verified":true,"closed_at":null,"days_open":20,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":20},"description":"About Infra360\nInfra360 is a Managed Cloud Service Provider helping businesses build, secure and operate their cloud and technology environments across Cloud, DevOps, SRE, Security, FinOps and Managed Services.\nWe are building our Security Operations and MDR capabilities and are looking for a hands-on SecOps Engineer to join the team.\nAbout the Role\nAs a SecOps Engineer, you will be responsible for security monitoring, alert investigation, threat hunting, detection engineering and incident response across customer environments.\nThis is not a traditional alert-monitoring role. We are looking for someone who can investigate security events, understand attacker behavior, identify the root cause, improve detections and support effective response.\nYou will work across SIEM, EDR/XDR, cloud, identity, endpoint and network security telemetry.\nKey Responsibilities\n1. Security Monitoring & Alert Investigation\nMonitor and investigate security alerts across customer environments.\nPerform alert triage and determine severity and business impact.\nCorrelate events across endpoint, identity, network and cloud sources.\nInvestigate suspicious activity and identify false positives.\nMaintain accurate incident timelines and investigation documentation.\nWork within defined security processes and customer SLAs.\n2. SIEM / XDR Operations\nWork with SIEM/XDR platforms such as Microsoft Sentinel, Microsoft Defender XDR, Wazuh, Splunk, Elastic, CrowdStrike, SentinelOne, Google SecOps or similar.\nAnalyze logs and security telemetry.\nDevelop and tune detection and correlation rules.\nMonitor log-source health and identify visibility gaps.\nImprove alert quality and detection coverage.\n3. Incident Response\nInvestigate and support response to incidents including:\nMalware and ransomware\nAccount compromise\nPhishing and business email compromise\nCredential attacks\nPrivilege escalation\nLateral movement\nSuspicious PowerShell/scripts\nCommand-and-control activity\nCloud security incidents\nData-exfiltration activity\nThe engineer should be able to understand what happened, how it happened, what is affected and what needs to be done next.\n4. Threat Hunting\nConduct proactive threat hunting using:\nMITRE ATT&CK\nIOCs and TTPs\nSuspicious processes\nAuthentication anomalies\nPowerShell/script activity\nC2 indicators\nCredential abuse\nCloud activity\nIdentify threats that may not have been detected through existing alerts.\n5. Detection Engineering\nDevelop and improve SIEM detection rules.\nCreate and tune correlation rules.\nDevelop behavioral and IOC-based detections.\nMap detections to MITRE ATT&CK.\nIdentify detection gaps and improve coverage.\nConvert incident learnings into new detection use cases.\nKnowledge of Sigma is preferred.\n6. EDR/XDR Investigation\nAnalyze processes, process trees, files, hashes and network connections.\nInvestigate endpoint behavior and persistence mechanisms.\nSupport endpoint isolation and containment.\nCoordinate remediation with the Security & IT Operations team.\nValidate endpoint security after remediation.\n7. Cloud Security Monitoring\nInvestigate security events across AWS, Azure and GCP.\nExposure to technologies such as CloudTrail, GuardDuty, Security Hub, IAM, WAF, Microsoft Defender and cloud audit logs is preferred.\nThe role focuses on security monitoring and investigation, while cloud infrastructure ownership remains with DevOps/SRE.\n8. Security Automation\nAutomate repetitive SOC activities using Python, PowerShell, APIs, SIEM automation or SOAR platforms.\nExamples include IOC enrichment, reputation checks, automated ticket creation, alert enrichment and response actions.\n9. Threat Intelligence & Vulnerability Analysis\nEnrich investigations using threat intelligence.\nAnalyze IPs, domains, hashes and malware indicators.\nTrack relevant CVEs and exploitation activity.\nSupport risk-based vulnerability prioritization.\nUse threat intelligence to improve detections and investigations.\nWhat We're Looking For\nMust Have:\n3-7 years of experience in SOC, SecOps, MDR, Incident Response or Cybersecurity.\nStrong hands-on SIEM experience.\nExperience with EDR/XDR platforms.\nExperience investigating security incidents.\nStrong networking fundamentals.\nGood Windows and Linux security knowledge.\nUnderstanding of IAM and authentication.\nUnderstanding of common attack techniques.\nIncident-response experience.\nGood understanding of MITRE ATT&CK.\nStrong analytical and troubleshooting skills.\nGood to Have:\nMDR/MSSP experience.\nThreat hunting experience.\nDetection engineering.\nSigma/YARA knowledge.\nPython or scripting.\nAWS/Azure/GCP security experience.\nKubernetes/container security exposure.\nSOAR experience.\nExperience handling multiple customers or tenants.\nWhat Success Looks Like\nIn this role, success means being able to detect, investigate and respond to security threats effectively, while continuously improving Infra360's MDR capabilities.\nYou will contribute to better detection coverage, faster response, fewer false positives, stronger threat hunting and more effective security operations across customer environments.","description_format":"text","description_chars":5067,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","DevOps & Platform Engineering","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-20T06:58:27Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.75,"p_room":0.75,"age_days":20,"expected_fill_days":22,"reasons":["conf:1","win:late"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":10586,"is_top_pay":false},"html_url":"https://alion.io/job/infra360-secops-engineer-security-operations-soc-engineer","json_url":"https://alion.io/job/infra360-secops-engineer-security-operations-soc-engineer.json","meta":{"generated_at":"2026-10-21T06:15:36Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9070,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3808104},"rest":"https://alion.io/mcp/rest/get_company?id=3808104"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finfra360-secops-engineer-security-operations-soc-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finfra360-secops-engineer-security-operations-soc-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finfra360-secops-engineer-security-operations-soc-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/infra360-secops-engineer-security-operations-soc-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finfra360-secops-engineer-security-operations-soc-engineer"}]}