{"id":1638263,"url":"https://alion.io/job/isone-senior-security-operations-center-soc-analyst","title":"Senior Security Operations Center (SOC) Analyst","company":{"id":3854059,"name":"ISO New England","domain":"isone.com","url":"https://alion.io/company/isone","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Dayforce","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Holyoke, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":142000,"currency":"USD","period":"year","gross":null,"usd_annual":142000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Autopsy","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DNS","optional":false},{"name":"EnCase","optional":false},{"name":"FTK","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Tcpdump","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Volatility","optional":false},{"name":"Windows","optional":false},{"name":"Wireshark","optional":false},{"name":"Zeek","optional":false},{"name":"Cortex XSOAR","optional":true}],"status":"live","first_seen_at":"2026-09-24T04:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-26T23:17:53Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"As a Senior SOC Analyst, you will play a pivotal role in defending critical infrastructure that powers millions of residents across New England. Our organization is responsible for safeguarding the electric grid, a cornerstone of public safety, economic stability, and national security.\n\nWhat we offer you:\nHybrid work environment (4 days/week on-site)\nDistance-based relocation assistance available\n7 people paid on-call rotation\nCompetitive compensation with a base salary + performance bonus\nRobust benefits package, including:\nEnhanced 401(k) and financial planning support\nTuition reimbursement and professional development \nWellness programs, including an onsite gym\nFree coffee at our onsite café\nFlexible work hours\nEmployee Business Networks \nA stable, mission-driven workplace where your impact truly matters\n\nHow you will make an Impact\nOperate independently with minimal supervision to detect, analyze, and respond to complex security threats in a fast paced, mission critical SOC environment supporting electric grid operations. \nLead response efforts for high severity and complex security incidents, coordinating containment, eradication, and recovery across IT, OT, and engineering teams. \nApply threat modeling techniques to anticipate adversary attack paths, inform detection strategy, and improve defensive coverage across critical infrastructure systems.\nPerform advanced threat detection and analysis using SIEM, EDR/XDR, network monitoring, and forensic tools. \nConduct malware analysis, digital forensics, and root cause investigations following security events affecting critical systems. \nDevelop, tune, and maintain detection rules, correlation logic, and automated response playbooks to continuously improve SOC effectiveness. \nCoordinate tabletop exercises, purple team activities, and grid focused security assessments. \nMentor and train junior SOC analysts, providing guidance on investigation techniques, tools, and best practices.\nServe as the project implementor for SOC-related initiatives, partnering with the PMO to plan, coordinate, and execute corporate security projects impacting SOC operations.\n\nWhat we are looking for\nSIEM platforms (Splunk, QRadar, ArcSight, Microsoft Sentinel, or similar)\nEDR/XDR solutions (CrowdStrike, Carbon Black, Microsoft Defender, SentinelOne, or similar)\nNetwork analysis tools (Wireshark, Zeek, tcpdump)\nForensic tools and techniques (EnCase, FTK, Volatility, Autopsy)\nAttack frameworks such as MITRE ATT&CK and the Cyber Kill Chain\nThreat actor tactics, techniques, and procedures (TTPs)\nThreat intelligence frameworks and indicators of compromise (IOCs)\nNetwork protocols (TCP/IP, DNS, HTTP/S, SMTP, SMB)\nFirewalls, IDS/IPS, and proxy technologies\nWindows and Linux operating systems (administration and security hardening)\nCloud environments (AWS, Azure, GCP) and cloud security principles\nScripting languages (Python, PowerShell, Bash)\nMalware analysis techniques (static and dynamic analysis)\nLog analysis and event correlation\nVulnerability management concepts\n\nSkills and Abilities:\nSelf-starter mindset with strong ownership, accountability, and professional judgment.\nProven ability to remain calm and decisive under pressure in incidents impacting critical infrastructure. \nStrong analytical, problem solving, and critical thinking skills.\nExcellent written and verbal communication, with the ability to explain complex issues clearly.\nCommitment to continuous learning and staying current with evolving threats and technologies.\n\nCritical Infrastructure SOC Competencies:\nComposure under pressure: Ability to remain calm, focused, and methodical during high-severity incidents where decisions directly impact grid reliability and public safety\nMission-driven mindset: Deep understanding of the responsibility that comes with defending critical infrastructure essential to national security and public welfare\nRapid triage and prioritization: Ability to quickly assess multiple simultaneous alerts and threats, making rapid decisions on priority and resource allocation\nSituational awareness: Continuous awareness of the operational environment, threat landscape, and potential cascading impacts of security events on critical systems\nTeam coordination: Skill in working seamlessly with cross-functional teams including IT, OT, engineering, and leadership during incident response\nClear communication under stress: Ability to convey technical information accurately and concisely to diverse stakeholders while managing active incidents\n\nPreferred qualifications:\nRelevant certifications such as GCIA, GCIH, GCFA, GREM, CISSP, CySA+, or equivalent\nExperience in critical infrastructure or energy sector environments\nBackground in threat hunting or offensive security concepts\nFamiliarity with NERC CIP compliance requirements\nExperience with SOAR platforms (Splunk SOAR, Palo Alto XSOAR, Swimlane)\nKnowledge of OT/ICS security concepts\n\nThis employer will not sponsor applicants for work visas for this position (ex: H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).\n\nThe expected salary range for this position is $115,000 - $142,000 per year. This role is also eligible for an annual performance bonus, comprehensive health insurance (medical, dental and vision), flexible spending and health savings accounts, a 401(k) plan with generous employer contributions and a student debt benefit, life and AD&D insurance, disability insurance, critical illness and hospital indemnity benefits, paid time off, paid leave, a wellness program, an employee assistance program and other great company perks.","description_format":"text","description_chars":5572,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule","Health insurance","Hybrid work","Professional development","Relocation assistance","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":true,"industries":["Incident Response","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-01T21:41:30Z"}],"visa":[],"liveness":{"score":57,"band":"ok","label":"Likely open","p_open":1,"p_active":0.757,"p_room":0.75,"age_days":32,"expected_fill_days":36,"reasons":["conf:1","win:late"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":142000,"is_top_pay":false},"html_url":"https://alion.io/job/isone-senior-security-operations-center-soc-analyst","json_url":"https://alion.io/job/isone-senior-security-operations-center-soc-analyst.json","meta":{"generated_at":"2026-10-26T23:34:27Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":32241,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854059},"rest":"https://alion.io/mcp/rest/get_company?id=3854059"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fisone-senior-security-operations-center-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fisone-senior-security-operations-center-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fisone-senior-security-operations-center-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/isone-senior-security-operations-center-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fisone-senior-security-operations-center-soc-analyst"}]}