{"id":472688,"url":"https://alion.io/job/logicalis-us-soc-3-analyst","title":"SOC 3 Analyst","company":{"id":179520,"name":"Logicalis","domain":"logicalis.com","url":"https://alion.io/company/logicalis-us","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":19,"ghost_share":0,"stale_share":0.789,"repost_share":0,"time_to_fill_p50_days":53,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":77517,"max":100000,"currency":"USD","period":"year","gross":null,"usd_annual":100000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MISP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"n8n","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"ISO 27001","optional":true}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-10-27T06:19:12Z","board_verified":true,"closed_at":null,"days_open":71,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":71},"description":"Summary\nThe Security Senior Analyst role is responsible for managing services for Managed Security Service customers. The Security Specialist has the remit of assessing, discovering and directing remediation of security threats & vulnerabilities within client environments whilst working as part of a managed security team on various cyber security projects and tasks.\nThis role involves working at all levels with Solution Architects, Development Operations, Engineers, SOC Analysts, clients and other stakeholders in building and managing security architecture and systems which are kept up-to-date and relevant in the rapidly evolving Managed Security Services industry.\nThis is a senior technical SOC role and the role holder is expected to provide Tier 3 analysis, advanced investigation, threat hunting, forensic support and technical leadership for complex or critical incidents. The role also supports mentoring, service improvement, playbook evolution and close collaboration with clients, internal teams, channel partners and vendors.\nEssential Duties and Responsibilities\nHandles internal and client escalations by engaging with key stakeholders.\n\nFollows & oversees that the team follows published SOC policies and procedures.\n\nActs as subject matter expert across Managed Security Service and be able to clearly articulate deliverables, limitations, feasibility, etc.\n\nDemonstrates thorough experience of the configuration, tuning and maintenance of SOC tools to improve detection capability and building re-usable visualisations / dashboards for security alert triage, threat hunting and similar use cases, etc.\n\nDevelops Standard Operating Procedures (SOPs) and use cases for monitoring and handling different types of security events.\n\nPerforms Threat intelligence gathering to ensure that detection methods are effective against current threats.\n\nHunts for suspicious activity based on anomalous activity.\n\nHandles events as part of the Security Incident Management Process.\n\nWorks with both internal and external partners to investigate and advise on security incidents and anomalies.\n\nPrepares detailed reports, providing information on findings, status and progress of investigations, as well as vulnerability and risk factors.\n\nServes as the senior technical escalation point and mentor for colleagues.\n\nProduces incident response playbooks to drive a consistent approach to handling common incidents and improve operational processes.\n\nAnalyzes structured security log data through the creation of aggregated / correlated reports or visualizations.\n\nIdentifies and implements opportunities for innovative and continuous improvement.\n\nLeads on customer incident response investigations and containment of threats, advising on remediation.\n\nParticipates in the Security Operations Centre on-call rotation.\n\nDemonstrates and actively promotes an understanding and commitment to the mission of Logicalis through performing behaviors consistent with the organization's values.\n\nMaintains a working knowledge of applicable Federal, State, and Local laws and regulations as well as policies and procedures of Logicalis in order to ensure adherence in a manner that reflects honest, ethical and professional behaviors.\n\nSupports and conducts self in a manner consistent with customer service expectations.\n\nSupervisory Responsibilities\nThis job has no supervisory responsibilities.\nQualifications\nTo perform this job successfully, an individual should be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nEducation/Experience/Technical Requirements/Certifications\nEquivalent combination accepted.\nEducation:\nBachelor’s Degree in a related field.\n\nExperience / Technical Requirements\nPrevious hands-on experience working in SOC environments is mandatory.\n\nExperience working within managed services, including SLAs, KPIs, operational reporting, customer escalations and continuous service improvement.\n\nStrong experience in incident response, complex investigation, threat hunting and advanced security analysis.\n\nForensics experience is mandatory for this role, including endpoint, network or cloud investigation scenarios.\n\nExperience with forensic tooling and investigation techniques such as evidence collection, timeline analysis, artefact review and root-cause analysis.\n\nExperience with SIEM platforms such as Microsoft Sentinel and/or Splunk.\n\nKnowledge of MITRE ATT&CK, detection engineering, EDR/XDR technologies and incident response frameworks.\n\nExperience with Cisco XDR, Microsoft Defender is a strong plus.\n\nExperience with MISP, n8n or SOAR platforms is a plus.\n\nAbility to act as a senior escalation point, lead technical investigations and support customers during complex or critical incidents.\n\nExcellent written and oral communication skills, including executive-level incident reporting and clear remediation guidance.\n\nStrong analytical mindset, ability to work under pressure and commitment to continual service improvement.\n\nCertifications\nCertifications from Microsoft, Splunk and GIAC are highly valued, for example Microsoft SC-200, Microsoft SC-100, Splunk Core Certified Power User, Splunk Enterprise Certified Admin, GIAC GCIH, GCIA, GCFA, GNFA, GREM or GCTI. Other relevant certifications such as CompTIA CySA+, CISSP, CISM or equivalent are also valued.\n\nOther Skills and Abilities\nTypically 5+ years of experience in cybersecurity, including significant experience in SOC, MSSP or mature internal security operations environments.\n\nHands-on experience analyzing security logs from SIEM, EDR/XDR, endpoint, identity, cloud and network security sources.\n\nExperience with Microsoft Sentinel and/or Splunk is highly valued.\n\nExperience with Cisco XDR, MISP, n8n and security automation/orchestration is highly valued.\n\nExperience with Azure and/or AWS security monitoring is valued.\n\nAwareness of security standards and frameworks such as ISO 27001, NIST, MITRE ATT&CK and common vulnerability management practices.\n\nPhysical Demands\nThe physical demands described here are representative of those that should be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.\nWhile performing the duties of this Job, the employee is constantly required to sit, talk, see, hear, and use hands and arms. The employee is frequently required to stand; move about, climb steps or balance and stoop, kneel, crouch, or crawl. The employee may occasionally lift and/or move up to 10 pounds.\nThe above statements describe the general nature and level of work being performed by individuals assigned to this classification. This is not intended to be an exhaustive list of all responsibilities and duties required of personnel so classified.\nLogicalis is an Equal Opportunity Employer. It is our policy to employ people who are qualified by reason of education, training, experience, and demonstrated performance. We value inclusion and belonging at our company. We do not discriminate on the basis of race, color, religion, national origin, sexual orientation, gender identity and gender expression, marital status, age, height, weight, disability, veteran status, or any other reason prohibited by applicable federal or state laws.\nNOTE: It is Logicalis’ practice that when a client requires medical testing, the employee must accept that requirement as a condition of their assignment and either submit to the tests or show proof they’ve completed the test satisfactorily (i.e., TB Test negative).\nSalary Compensation Range: $77,517 - $100,000/yr.\nLogicalisUS Benefits Summary","description_format":"text","description_chars":7858,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Managed IT Services (MSP)","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-06T13:47:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 1","filings_12m":0,"filings_prev_12m":5,"green_card_filings_12m":1,"median_offered_wage_usd":192500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.525,"p_room":0.44,"age_days":71,"expected_fill_days":53,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:"],"computed_at":"2026-10-27T05:46:45Z"},"pay":{"stated_usd_annual":100000,"is_top_pay":false},"html_url":"https://alion.io/job/logicalis-us-soc-3-analyst","json_url":"https://alion.io/job/logicalis-us-soc-3-analyst.json","meta":{"generated_at":"2026-10-27T15:24:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4361,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":179520},"rest":"https://alion.io/mcp/rest/get_company?id=179520"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Flogicalis-us-soc-3-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Flogicalis-us-soc-3-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Flogicalis-us-soc-3-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/logicalis-us-soc-3-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Flogicalis-us-soc-3-analyst"}]}