{"id":3776534,"url":"https://alion.io/job/kyndryl-soc-lead-2","title":"SOC Lead","company":{"id":91,"name":"Kyndryl","domain":"kyndryl.com","url":"https://alion.io/company/kyndryl","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":145,"ghost_share":0,"stale_share":0.641,"repost_share":0.021,"time_to_fill_p50_days":35,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"ITSM","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-04T17:40:15Z","employer_posted_date":null,"last_verified_at":"2026-11-04T17:40:15Z","board_verified":false,"closed_at":null,"days_open":4,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":4},"description":"Job Title: SOC CW n Dev Lead \nLocation: Noida Sector 144 \nShift and Schedule: 5 Days Office (Rotational)\n\nSummary: \nA cybersecurity engineer is responsible for protecting computer systems and networks from cyber threats, such as hacking, viruses, and other malicious attacks. Their job involves overseeing the implementation, deployment and maintenance of security solutions to ensure the confidentiality, integrity, and availability of data. Interacts with the Cybersecurity Architecture team to provide feedback on design and any areas in need of improvement.\nJob Qualifications: You're good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you're open and borderless – naturally inclusive in how you work with others.\n\nRequired Skills and Experience:\nNeed 4 to 5 years of experience.\nThe SOC Lead cum Shift Incident Manager plays a dual role: as a senior technical expert, handling complex security incidents and as the shift lead responsible for managing SOC operations during their assigned shift. This role is critical in ensuring 24x7 incident response, operational continuity, and escalation governance.\nInvestigate and resolve escalated security incidents from L1 and L2 analysts.\nPerform deep-dive forensic analysis, triage, and root cause analysis (RCA) for critical and high-severity incidents\nThe candidate should have hands-on experience in monitoring, analyzing, and responding to security alerts from Microsoft Sentinel, DLP solutions, and CrowdStrike EDR.\nMonitor the health and performance of SIEM infrastructure and security sensors.\nTune and manage SIEM rules, correlation logic, and detection use cases.\nCoordinate with OEM vendors for platform issues or advanced threat resolution\nAct as the Incident Manager for the shift, overseeing all incident response activities and ensuring SLA adherence\nLead shift handover meetings and maintain continuity across shifts.\nAssign tasks to L1/L2 analysts and ensure proper documentation in ITSM tools (e.g., ServiceNow)\nEscalate unresolved or critical issues to the SOC Manager or CDC Head as needed\nMaintain shift logs, incident metrics, and RCA documentation.\nConduct training sessions and contribute to skill development plans\nReview and refine incident response procedures and playbooks.\nCollaborate with SIEM Engineers, SOAR Developers, and Content Writers to enhance detection and automation workflows\nCoordinate with DLP, EDR, and Email Security SMEs for multi-vector incident resolution.\n\nPreferred Skills and Experience:\nTool used-MS Sentinel and Logicapps\nParticipate in governance forums and lessons learned reviews\nProvide feedback on detection quality, false positives, and tuning opportunities.\nGuide L1 and L2 analysts during investigations and response activities.","description_format":"text","description_chars":2973,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Infrastructure & Networking Services","Systems Integrators","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-11-04T23:09:45Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":4,"expected_fill_days":35,"reasons":["seen:4","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":null,"html_url":"https://alion.io/job/kyndryl-soc-lead-2","json_url":"https://alion.io/job/kyndryl-soc-lead-2.json","meta":{"generated_at":"2026-11-09T07:44:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5335,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":91},"rest":"https://alion.io/mcp/rest/get_company?id=91"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fkyndryl-soc-lead-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fkyndryl-soc-lead-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fkyndryl-soc-lead-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/kyndryl-soc-lead-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fkyndryl-soc-lead-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3776534}},{"tool":"search_jobs","arguments":{"company":"kyndryl.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3776534},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}