{"id":1694834,"url":"https://alion.io/job/interactive-brokers-security-operator-i","title":"Security Operator I","company":{"id":58627,"name":"Interactive Brokers","domain":"interactivebrokers.com","url":"https://alion.io/company/interactive-brokers","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":{"grade":"B","score":75,"open_postings":51,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-06T05:45:30Z"}},"role":"Field & Service","role_family":"Field & Service","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":6500,"max_usd":14000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":6980},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"OWASP","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Crowdstrike","optional":true},{"name":"SentinelOne","optional":true},{"name":"Splunk","optional":true}],"status":"live","first_seen_at":"2026-06-23T00:30:00Z","employer_posted_date":"2026-10-02","last_verified_at":"2026-10-06T23:35:25Z","board_verified":true,"closed_at":null,"days_open":106,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":105},"description":"Position Overview: Seeking a “Security Operator I” to join our Security Operations Center (SOC) team, focusing on incident response and threat detection. This role involves working with enterprise SIEM platforms, EDR solutions, and incident management tools to protect IBKR's global trading infrastructure.\nKey Responsibilities:Security Monitoring & Alert Triage\nMonitor security alerts generated by SIEM, EDR, email security, network, and cloud security tools\nPerform initial triage and validation of alerts to determine severity, scope, and potential impact\nIdentify false positives and review tuning opportunities.\nIncident Response Support\nExecute incident response playbooks for common attack scenarios such as phishing, malware, endpoint compromise, and suspicious logins\nAssist in containment and remediation actions under guidance from senior SOC or IR team members\nParticipate in 24×7 SOC operations, including shift rotations and on-call coverage\nInvestigation & Analysis\nPerform log analysis across Windows, Linux, network, and security tool telemetry\nValidate Indicators of Compromise (IOCs) using internal tools and threat intelligence sources\nSupport malware and phishing investigations through file, URL, and domain analysis\nIncident Management & Documentation\nCreate and maintain incident tickets in the incident management platform (e.g., ServiceNow)\nDocument investigation steps, findings, evidence, and closure rationale clearly and accurately\nFollow SOC standards for documentation, escalation, and handover\nCollaboration & Learning\nWork closely with senior analysts, incident responders.\nContinuously develop technical skills through hands-on investigations, training, and mentoring\nStay current with common attack techniques and SOC best practices\nRequired skills and Qualifications:\nTechnical Knowledge: Basic understanding of cybersecurity principles, networking protocols (TCP/IP), and Operating Systems (Linux/Windows).\nTool Familiarity: Experience, training or understanding of Cyber Security Technologies such as SIEM, EDR, Email Security, Firewall, IDS/IPS, OWASP etc.\nExperience with incident playbooks\nAnalytical Skills: Ability to analyze large datasets to identify patterns.\nSoft Skills: Strong communication skills, ability to work in a fast-paced environment, and a proactive mindset.\nEducation/Certification: Bachelor's degree in IT/Cybersecurity. certifications like CompTIA Security+, Certified Ethical Hacker (CEH) is a plus.\nExperience: 2–5 years of hands-on experience in SOC or cybersecurity roles, with relevant certifications considered as a substitute for part of the experience requirement.\nTechnical Environment:\nSIEM platforms (SentinelOne/Splunk/MS Sentinel)\nEDR platforms (SentinelOne/MS Defender/Crowdstrike)\nIncident management systems\nWork Requirements:\nRotating shifts (24x7 SOC)\nIncident response handling\nAlert triage and escalation\nDocumentation and reporting\nTeam collaboration\nGrowth Path:\nAdvanced IR certification support\nThreat hunting training\nDigital forensics exposure\nTechnical skill development\nAnalyst & Senior analyst progression\nCompany Benefits & Perks: \nCompetitive salary package.\nPerformance-based annual bonus (cash and stocks).\nHybrid working model (3 days office/week).\nGroup Medical & Life Insurance.\nModern offices with free amenities & fully stocked cafeterias.\nMonthly food card & company-paid snacks.\nHardship/shift allowance with company-provided pickup & drop facility*\nAttractive employee referral bonus.\nFrequent company-sponsored team-building events and outings.\n* Depending upon the shifts.\n**The benefits package is subject to change at the management's discretion","description_format":"text","description_chars":3654,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Cafeteria","Hybrid work","Life insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-02T11:57:18Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.133,"p_room":0.28,"age_days":105,"expected_fill_days":20,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-06T05:45:30Z"},"pay":null,"html_url":"https://alion.io/job/interactive-brokers-security-operator-i","json_url":"https://alion.io/job/interactive-brokers-security-operator-i.json","meta":{"generated_at":"2026-10-07T00:42:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1243,"day_limit":5000,"remaining_today":3757,"minute_limit":60,"resets_at":"2026-10-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58627},"rest":"https://alion.io/mcp/rest/get_company?id=58627"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finteractive-brokers-security-operator-i"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finteractive-brokers-security-operator-i"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finteractive-brokers-security-operator-i"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/interactive-brokers-security-operator-i\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finteractive-brokers-security-operator-i"}]}