{"id":995606,"url":"https://alion.io/job/liferay-senior-info-security-analyst","title":"Senior Info Security Analyst","company":{"id":716273,"name":"Liferay","domain":"liferay.com","url":"https://alion.io/company/liferay-3","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Jobvite","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Recife, Brazil"],"countries":["BR"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":106000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"DNS","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false},{"name":"Docker","optional":true},{"name":"GCP","optional":true},{"name":"GDPR","optional":true},{"name":"HIPAA","optional":true},{"name":"ISO 27001","optional":true},{"name":"Kubernetes","optional":true},{"name":"NIST CSF","optional":true}],"status":"live","first_seen_at":"2026-09-17T07:18:08Z","employer_posted_date":"2026-09-20","last_verified_at":"2026-11-05T01:00:25Z","board_verified":true,"closed_at":null,"days_open":48,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":48},"description":"About Liferay\nLiferay is a uniquely profitable B2B enterprise software company with 1,000+ fiery-eyed employees all across Europe, the Americas, the Middle East, Asia, and Africa. As a renowned provider of enterprise open source technologies, we have been recognized by Gartner for empowering businesses around the world to solve complex digital challenges. Liferay’s all-in-one platform unites Liferay DXP with our cloud platform capabilities, built-in analytics, and commerce functionality, reducing time to market and accelerating innovation. Our customer roster includes global companies such as Airbus, US Bank, Honda, and Desjardins.\nBut we don’t just make awesome software, we are also fueled by a greater-than-profit vision. By building a vibrant business, making technology useful, and investing in communities, we make it possible for people to reach their full potential to serve others. This commitment extends beyond our product; Liferay donates 10% of our profits to charities around the world. Oh, we’re also self-funded which gives us the freedom to work on whatever we think brings the most value to customers and communities in the long run!\nAbout You and this Role\nAs Senior SOC Analyst, you are instrumental in safeguarding our organization's digital assets through your leadership in advanced threat detection, incident response, and security posture enhancement initiatives. This role requires you to leverage your deep technical expertise to mentor junior analysts, drive process improvements, and contribute strategically to our evolving security landscape.\n\nKey Responsabilities\nProactively analyze, investigate, and respond to complex security alerts, sophisticated threats, and advanced persistent threats (APTs) to identify, contain, and remediate security incidents and breaches with minimal supervision.\nUse AI to automate incident response, investigation and threat hunting activities\n\nAct as a lead investigator and primary escalation point within the team during critical security incidents, coordinating response efforts, and driving effective resolution.\n\nTake ownership of Liferay security systems, continuously optimizing their configuration, tuning detection rules, and developing new use cases to enhance threat detection, prevention, and response capabilities. This includes leveraging advanced features and integrating with other security tools.\n\nResearch, evaluate, and recommend cutting-edge security technologies, tools, and methodologies. Propose and implement strategic improvements to our information security controls, architecture, and overall security posture.\n\nProvide expert mentorship, guidance, and training to junior and mid-level SOC analysts, fostering their professional growth and enhancing the overall capabilities of the team. Develop and deliver internal security awareness and technical training sessions.\n\nCollaborate extensively with engineering, operations, and other IT teams to embed security best practices throughout the organization, troubleshoot complex security issues, and ensure secure system deployments.\n\nIdentify opportunities for process automation and efficiency gains within the SOC. Develop and implement playbooks, runbooks, and standard operating procedures (SOPs) to streamline incident response and threat hunting activities.\nProactively hunt for emerging threats, vulnerabilities, and malicious activities within our environment, leveraging threat intelligence and advanced analytical techniques.\nKey Objectives\nWithin 30 days: Complete a comprehensive deep dive into Liferay's security architecture, existing security controls, and current threat landscape, identifying initial areas for enhancement. Begin contributing to high-priority incident investigations.\nWithin 60 days: Take ownership of the development and refinement of at least two critical security detection use cases within our SIEM/security systems. Lead a complex security alert triage process independently, demonstrating advanced analytical capabilities.\nWithin 90 days: Lead and successfully resolve a significant security incident, demonstrating strong incident management and communication skills. Propose and begin implementing a key process improvement or automation initiative within the SOC.\nRequired Qualifications\nExperience working in a Security Operations Center (SOC) or a similar information security role with a strong focus on incident detection and response.\nDeep expertise in IT networking protocols (TCP/IP, DNS, HTTP/S, etc.), web applications, operating systems (Linux/Windows), and cloud environments.\n\nProven experience with SIEM platforms (e.g., Splunk, Elastic, Sentinel) including advanced query languages, correlation rule creation, and dashboard development.\n\nExpert-level understanding of common attack vectors, attack methodologies (e.g., MITRE ATT&CK), and adversary tactics, techniques, and procedures (TTPs).\n\nDemonstrated experience in leading security incident investigations, including analysis of logs, network traffic, endpoints, and other security telemetry.\n\nStrong scripting skills (e.g., Python, PowerShell, Bash) for automation, data analysis, and tool development.\n\nExcellent communication and interpersonal skills, with the ability to articulate complex security concepts to technical and non-technical audiences.\n\nAbility to work independently and collaboratively in a fast-paced, global environment, managing multiple priorities effectively.\nFluent in English.\nPreferred Qualifications\nBachelor’s or Master’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field.\nAdvanced experience with cloud security principles and technologies, particularly Google Cloud Platform (GCP).\n\nExperience with forensic tools and techniques.\n\nFamiliarity with containerization technologies (e.g., Docker, Kubernetes).\n\nPrior experience in a leadership or mentorship role within a security team.\nExperience with vulnerability management and penetration testing concepts.\nOptional BUT Desired Certifications and Field Knowledge\nIndustry-recognized security certifications such as CISSP, GCIH, GCIA, CEH, CompTIA CySA+, or equivalent.\n\nExtensive knowledge of information security frameworks and compliance standards (e.g., ISO 27001, NIST CSF, SOC 1/2, GDPR, HIPAA).\n\nExperience with Security Orchestration, Automation, and Response (SOAR) platforms.\nKnowledge of software development lifecycle (SDLC) security and DevOps security practices.\nWhat We Offer\nSalary package w/ competitive benefits according to qualifications and experience Opportunities to take responsibility, grow professionally, and Stay Nerdy\nA positive and collaborative work culture\nWorking at aleading open-source company\nEqual Opportunities Employer - Statement\nLiferay is committed to the equal treatment of all candidates, customers and employees and to fostering a culture of dignity at work. Our operating procedure provides for equal opportunities in recruitment and employment with the aim to eliminate discrimination against any job applicant or employee on the basis of race, age, sexual orientation, gender, religion or beliefs, marital or civil partnerships status, family or dependency status, disability, pregnancy and maternity or membership of a traveling community.","description_format":"text","description_chars":7265,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["E-commerce Platforms","CMS & Digital Experience Platforms","Low-Code & No-Code Platforms"],"lifecycle":[{"event":"open","at":"2026-09-17T07:18:08Z"}],"visa":[],"liveness":{"score":24,"band":"cold","label":"Long shot","p_open":1,"p_active":0.7,"p_room":0.35,"age_days":47,"expected_fill_days":23,"reasons":["conf:0","win:tail"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/liferay-senior-info-security-analyst","json_url":"https://alion.io/job/liferay-senior-info-security-analyst.json","meta":{"generated_at":"2026-11-05T05:47:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6866,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716273},"rest":"https://alion.io/mcp/rest/get_company?id=716273"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fliferay-senior-info-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fliferay-senior-info-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fliferay-senior-info-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/liferay-senior-info-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fliferay-senior-info-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":995606}},{"tool":"search_jobs","arguments":{"company":"liferay.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":995606},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}