{"id":114362,"url":"https://alion.io/job/metro-security-analyst","title":"Security Analyst","company":{"id":4153,"name":"METRO","domain":"metro.com","url":"https://alion.io/company/metro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":122,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-16T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":600000,"max":1200000,"currency":"INR","period":"month","gross":null,"usd_annual":152472},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cortex","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DLP","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-08-24T06:58:55Z","employer_posted_date":"2026-08-24","last_verified_at":"2026-10-16T19:23:08Z","board_verified":true,"closed_at":null,"days_open":53,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":53},"description":"Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €31 Billion international wholesaler with operations in more than 30 countries. The store network comprises a total of 623 stores in 21 countries, of which 522 offer out-of-store delivery (OOS), and 94 dedicated depots. In 12 countries, METRO runs only the delivery business by its delivery companies (Food Service Distribution, FSD).\nHoReCa and Traders are core customer groups of METRO. The HoReCa section includes hotels, restaurants, catering companies as well as bars, cafés and canteen operators. The Traders section includes small grocery stores and kiosks. The majority of all customer groups are small and medium-sized enterprises as well as sole traders. METRO helps them manage their business challenges more effectively.\nMGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.\n As a Level 1 Cyber Defense Operations Center (CDOC) Analyst, you will monitor different security solutions with focus on SIEM and SOAR technologies. You’ll be responsible for triaging security incidents, involving L2/L3 incase of high and critical incident. This role requires medium level of technical knowledge about network, email and Operating systems etc , team player quality, and a proactive approach to evolving threats.\nRole and Responsibilities\nRun daily Security monitoring, alert triage, and coordinated incident response to ensure effective real-time threat monitoring.\nContinuously enhance SIEM/SOAR/XDR alert use cases and threat detection capabilities.\nResearch emerging threats, vulnerabilities, and attack techniques to improve defenses.\nCollaborate across teams to improve the organization’s threat detection and response maturity.\nMaintain detailed incident records, contribute to reporting, and support audit readiness.\nShare knowledge with about new findings, update SOP, promoting best practices and continuous improvement within the SOC.\nEnsure detection and response processes align with regulatory and organizational standards.\nStay up to date on emerging threats and technologies to continuously evolve SOC capabilities.\nSupport comprehensive asset inventory and ownership mapping to ensure full monitoring coverage.\n Technical & Soft Skills:\nGood hands-on experience with technologies like SIEM, SOAR, XDR such as Google Chronicle, CrowdStrike, Logscale, Splunk.\nGood working knowledge of endpoint security tools and concepts, including EDR (CrowdStrike, Defender, Cortex), DLP, and MDM.\nStrong knowledge of MITRE ATT&CK, NIST CSF frameworks, and cyber kill chain concepts.\nGood understanding of network security, operating systems, and hybrid cloud environments (Cloud, On-Prem, VDI).\nIn-depth knowledge of threat landscapes and technical security concepts.\nStrong grasp of network protocols, OS internals, and security technologies.\nFamiliar with compliance standards such as NIST CSF and ISO 27001.\nStrong organizational and time management skills with the ability to coordinate and prioritize multiple tasks simultaneously.\nAbility to work under pressure, especially during critical security incidents.\nAbility to conduct independent research and analysis, identifying issues, formulating options, and making conclusions and recommendations.\nSkilled in developing professional documentation and detailed reporting (including PowerPoint presentations), including policies, standards, processes and procedures\nGood communication and interpersonal skills to effectively collaborate with stakeholders, and internal teams\n Qualifications & Experience\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field. A Master's degree or relevant certifications (e.g., Security+ , CEH ,GCIH) may be preferred.\n2-4 years of total experience in SOC in a large multi-national organization or in a known MSSP.","description_format":"text","description_chars":4431,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Wholesale"],"lifecycle":[{"event":"open","at":"2026-08-24T06:58:55Z"}],"visa":[],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":1,"p_active":0.336,"p_room":0.36,"age_days":52,"expected_fill_days":35,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":{"stated_usd_annual":152472,"is_top_pay":true},"html_url":"https://alion.io/job/metro-security-analyst","json_url":"https://alion.io/job/metro-security-analyst.json","meta":{"generated_at":"2026-10-16T23:02:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4153},"rest":"https://alion.io/mcp/rest/get_company?id=4153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetro-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetro-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetro-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metro-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetro-security-analyst"}]}