{"id":2768968,"url":"https://alion.io/job/litmos-heroes-security-analyst","title":"Security Analyst","company":{"id":4442798,"name":"Litmos Heroes","domain":"litmos.com.about","url":"https://alion.io/company/litmos-heroes-2","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"ISO 27001","optional":true},{"name":"Microsoft Defender for Cloud","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-14T05:23:05Z","employer_posted_date":null,"last_verified_at":"2026-10-14T05:23:05Z","board_verified":false,"closed_at":null,"days_open":8,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":8},"description":"Are you looking for an opportunity to help solve one of today's biggest business challenges AI is changing the pace of business, and organizations everywhere are struggling to help their workforce, partners, and customers keep up. At Litmos, we're building the Learning Acceleration Platform that helps organizations build human capability faster—and we're looking for people who are passionate about making a meaningful impact for customers while growing alongside a collaborative, people-first team.\n\nLitmos is the Learning Acceleration Platform that helps organizations build capability faster, adapt at the speed business changes, and scale learning to anyone, anywhere. Combining an intuitive platform, AI-powered capabilities, trusted content, expert services, and a broad ecosystem of integrations, Litmos helps organizations accelerate workforce productivity, improve customer adoption and retention, enable high-performing partners, and reduce organizational risk through continuous learning.\n\nOrganizations such as Hewlett Packard Enterprise, Graco, Sabre, and Russell Mineral Equipment trust Litmos to accelerate learning across their workforce, partners, and customers. Today, more than 11K customers with 30 million learners across 150 countries and 37 languages use Litmos to build the capabilities their organizations need to succeed. Backed by Francisco Partners, one of the world's leading technology investment firms, we're investing in the future of learning—and the people who are building it. Learn more at www.litmos.com.\n\nAbout The Role\n\nWe are looking for a senior, self-directed SOC Analyst to join our lean global security operations team based in Pune. As the sole security operations resource during non-US business hours, you will own the full spectrum of alert triage, incident investigation, and response for your shift. This role requires someone who can function as both an L2 investigator and an L3 responder depending on the situation, without relying on a senior analyst to hand off to.\n\nResponsibilities\n\nIncident Investigation & Response\n\nOwn the full incident lifecycle during non-US hours — from initial triage through containment, remediation, and documentation \nConduct in-depth investigation of security events across SIEM, EDR, email security, network, identity, and cloud platforms \nPerform root cause analysis on confirmed incidents and produce clear, actionable incident reports \nEscalate incidents to the Director of Security Operations with a clear situation summary and recommended course of action \nProvide detailed shift handoff notes to the US-based security analyst at transition, ensuring full continuity of open investigations \n\nProcess & Documentation\n\nDevelop, maintain, and improve incident response playbooks and SOC runbooks \nMaintain accurate and up-to-date documentation across all active and closed incidents \nContribute to weekly and monthly SOC metrics, trend analysis, and reporting for the Director of Security Operations \nIdentify opportunities to improve SOC processes, tooling, and automation and bring recommendations to the team \n\nCollaboration\n\nWork closely with the US-based security analyst and Director of Security Operations during shift overlap windows to align on priorities, open incidents, and ongoing investigations \nServe as the primary security operations contact for any India-based stakeholders or teams during non-US hours \n\nQualifications\n\nBachelor's degree in Computer Science, Information Technology, Electronics, or a related field (B.E. / B.Tech / BCA / B.Sc. IT preferred) \n4–6 years of experience in SOC or cybersecurity operations, with demonstrated experience performing both L2 investigation and L3 response duties \nHands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, IBM QRadar, or similar) \nStrong experience with EDR tools (CrowdStrike Falcon, Microsoft Defender, SentinelOne, or similar) \nAdvanced log analysis skills across Windows, Linux, cloud (AWS, Azure, GCP), and identity platforms (Active Directory, Azure AD) \nStrong working knowledge of the MITRE ATT&CK framework \nDemonstrated ability to work independently, make sound decisions under pressure, and manage incidents end-to-end without real-time senior support \nExcellent written and verbal communication skills in English — including the ability to write clear incident reports, escalation summaries, and shift handoff notes for a global team \nComfortable working non-US business hours \n\nNice to Have\n\nCertifications: CompTIA CySA+, GCIH, GCFE, GCFA, SC-200, or equivalent \nExperience with SOAR platforms and alert automation or basic scripting (Python, PowerShell) for SOC workflow improvement \nExposure to cloud security monitoring (AWS GuardDuty, Microsoft Defender for Cloud, Azure Sentinel, etc.) \nExperience operating in a small or lean security team with broad individual ownership \nFamiliarity with GRC concepts and compliance frameworks (SOC 2, ISO 27001, NIST) to support cross-team collaboration \n\nSalary Range: 24,00,000 to 32,00,000 plus 10% bonus\n\nAs a learning company we believe in the potential of everyone; if you don't have experience in all the details mentioned in this job post, then we still encourage you to apply and we'll get back to you as soon as we can.\n\nWe are an equal opportunity workplace employer. We are committed to the values of Equal Employment Opportunity and provide accessibility accommodations to applicants with physical and/or mental disabilities.\n\nApplicants will receive consideration for employment without regard to their age, race, religion, national origin, ethnicity, age, gender (including pregnancy, childbirth, et al), sexual orientation, gender identity or expression, protected veteran status, or disability.","description_format":"text","description_chars":5744,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-17T03:17:59Z"}],"visa":[],"liveness":{"score":82,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.816,"p_room":1,"age_days":8,"expected_fill_days":27,"reasons":["seen:8","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/litmos-heroes-security-analyst","json_url":"https://alion.io/job/litmos-heroes-security-analyst.json","meta":{"generated_at":"2026-10-22T17:40:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":49,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4442798},"rest":"https://alion.io/mcp/rest/get_company?id=4442798"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flitmos-heroes-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flitmos-heroes-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flitmos-heroes-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/litmos-heroes-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flitmos-heroes-security-analyst"}]}