{"id":3555227,"url":"https://alion.io/job/integrity360-principal-soc-analyst","title":"Principal SOC Analyst","company":{"id":56833,"name":"Integrity360","domain":"integrity360.com","url":"https://alion.io/company/integrity360","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Welcome to the Jungle","truth_index":{"grade":"B","score":75,"open_postings":3,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Paris, France"],"countries":["FR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":155000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":753},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Darktrace","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"DLP","optional":true},{"name":"DNP3","optional":true},{"name":"DNS","optional":true},{"name":"GCP","optional":true},{"name":"IBM QRadar","optional":true},{"name":"Microsoft Defender","optional":true},{"name":"Microsoft Sentinel","optional":true},{"name":"MITRE ATT&CK","optional":true},{"name":"SentinelOne","optional":true},{"name":"SIEM","optional":true},{"name":"Snort","optional":true},{"name":"Splunk","optional":true},{"name":"Suricata","optional":true},{"name":"TCP/IP","optional":true},{"name":"Zeek","optional":true}],"status":"live","first_seen_at":"2026-10-31T00:08:14Z","employer_posted_date":"2026-10-31","last_verified_at":"2026-11-01T22:30:33Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Join our team as a Principal SOC Analyst, where you will act as a Level 3 escalation point within the MDR/SOC function. You will provide advanced technical support to Level 2 analysts during complex or high-severity investigations, and contribute to the continuous improvement of the MDR service. This role requires strong hands-on experience in security operations, incident response, threat analysis, and detection tuning. You will also support the development of Operational Technology (OT) security monitoring and incident response capabilities.\nMissions\nAct as a Level 3 escalation point for advanced security investigations, providing technical guidance and direction to Level 2 analysts.\nLead advanced incident investigations, including scoping, containment, eradication, and remediation recommendations, while performing in-depth analysis of security events.\nContribute to the continuous improvement of the MDR service by supporting the definition of security monitoring strategies, improving detection logic, and tuning security technologies.\nProfil recherché\n - Ability to analyse endpoint, network, identity, cloud and application telemetry in support of complex investigations- Experience with OT security platforms or NDR (e.g. Armis, Nozomi, Clarity, Dragos, Darktrace) is a plus\n- Understanding of IT/OT convergence challenges and network segmentation practices (e.g. IEC 62443)\n- Experience with cloud security monitoring across Microsoft Azure, AWS or Google Cloud is beneficial\n- Experience supporting industrial or critical infrastructure environments is a plus\n- Strong experience with security event triage, correlation, investigation and escalation\n- Minimum 2-3 years of experience in a SOC, MDR, incident response, CSIRT or cyber security operations role\n- Experience supporting customer-facing technical discussions, including investigation reviews, tuning recommendations and posture improvement activities\n- Working knowledge of SIEM, EDR, SOAR, NIDS, DLP and threat intelligence platforms\n- Knowledge of OT threat landscape and frameworks (e.g. MITRE ATT&CK for ICS)\n- Ability to produce clear technical documentation, investigation reports and customer-facing recommendations\n- Strong understanding of incident response lifecycle, including preparation, identification, containment, eradication, recovery and lessons learned\n- Strong understanding of attacker tactics, techniques and procedures, including MITRE ATT&CK\n- Experience supporting customers or internal stakeholders with security optimization, detection tuning and cyber security posture improvement\n- Understanding of OT / ICS environments (SCADA, DCS, PLCs, HMIs, industrial networks)\n- Ability to perform host-based and network-based threat analysis\n- Deep operational knowledge of SIEM, EDR, Network Intrusion Detection Systems, SOAR, DLP and related security monitoring technologies\n- Strong understanding of enterprise network architecture, TCP/IP, firewalls, proxies, VPNs, DNS, email security and cloud environments\n- Experience analysing packet captures, endpoint artefacts, logs, scripts, documents and potentially malicious files\n- Experience with Microsoft Sentinel, Microsoft Defender, Splunk, QRadar, CrowdStrike, SentinelOne, Palo Alto, Suricata, Zeek, Snort or similar technologies is highly beneficial\n- Strong hands-on experience in Security Operations Centre or MDR environments\n- Experience with threat hunting, detection engineering or purple team activities is beneficial\n- Ability to manage multiple complex incidents and make effective decisions under pressure\n- Experience working with threat hunting methodologies and security detection frameworks\n- Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non-technical stakeholders\n- Proven experience handling complex security incidents and supporting advanced investigations\n- Experience with SIEM query languages and detection logic, such as KQL, SPL, Sigma or equivalent\n- Familiarity with industrial protocols (e.g. Modbus, OPC, IEC 104, DNP3) is beneficial\n- Understanding of security protocols, encryption technologies and common authentication mechanisms\n- Experience tuning security controls and detection content to improve alert fidelity and reduce false positives\n- Security industry certifications such as GCIH, GCFA, GCIA, GNFA, GCTI, GSEC, CISSP, CySA+, SC-200, AZ-500 or equivalent are highly beneficial\n- OT-related certifications or training (e.g. GICSP, GRID, IEC 62443) are advantageous","description_format":"text","description_chars":4535,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Information Security","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-31T00:30:53Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/integrity360-principal-soc-analyst","json_url":"https://alion.io/job/integrity360-principal-soc-analyst.json","meta":{"generated_at":"2026-11-02T01:03:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1627,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":56833},"rest":"https://alion.io/mcp/rest/get_company?id=56833"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintegrity360-principal-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintegrity360-principal-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintegrity360-principal-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/integrity360-principal-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintegrity360-principal-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3555227}},{"tool":"search_jobs","arguments":{"company":"integrity360.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3555227},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}