{"id":71974,"url":"https://alion.io/job/metro-senior-soc-engineer-2","title":"Senior SOC Engineer","company":{"id":4153,"name":"METRO","domain":"metro.com","url":"https://alion.io/company/metro","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":121,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":35,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Hardware","role_family":"Hardware","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":40000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Confluence","optional":false},{"name":"Git","optional":false},{"name":"ITSM","optional":false},{"name":"Logstash","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-08-19T09:39:23Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-18T08:25:33Z","board_verified":true,"closed_at":null,"days_open":60,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":60},"description":"Metro Global Solution Center (MGSC) is internal solution partner for METRO, a €31 Billion international wholesaler with operations in more than 30 countries. The store network comprises a total of 623 stores in 21 countries, of which 522 offer out-of-store delivery (OOS), and 94 dedicated depots. In 12 countries, METRO runs only the delivery business by its delivery companies (Food Service Distribution, FSD).\nHoReCa and Traders are core customer groups of METRO. The HoReCa section includes hotels, restaurants, catering companies as well as bars, cafés and canteen operators. The Traders section includes small grocery stores and kiosks. The majority of all customer groups are small and medium-sized enterprises as well as sole traders. METRO helps them manage their business challenges more effectively.\nMGSC, location wise is present in Pune (India), Düsseldorf (Germany) and Szczecin (Poland). We provide HR, Finance, IT & Business operations support to 31 countries, speak 24+ languages and process over 18,000 transactions a day. We are setting tomorrow’s standards for customer focus, digital solutions, and sustainable business models. For over 10 years, we have been providing services and solutions from our two locations in Pune and Szczecin. This has allowed us to gain extensive experience in how we can best serve our internal customers with high quality and passion. We believe that we can add value, drive efficiency, and satisfy our customers.\n As a Senior SOC Engineer as part of the Cyber Defense Operations Center (CDOC) you will work in the Detection and Response Engineering team with a focus on XDR, SIEM and SOAR technologies. You’ll be responsible for helping the SOC Specialist in integrating log sources, reviewing and developing use cases and response playbooks.\nThis role requires in-depth knowledge of custom parsing, python scripting, REGEX, API Integration and playbook creation, hence also experienced Software Developers or similar hands-on roles are welcomed to apply\nQualification:\nBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.\n4-7 years of total experience in SecOps/DevOps , in a large multi-national organization or in a known MSSP. In addition, candidate should posses at least 3 years of working experience automation, integration and custom parser creation for SecOps/DevOps tools like SIEM, SOAR or ITSM tool.\nLateral joiners from other hands-on information technology roles are highly welcomed to apply!\n Experience \nDesign and build custom parsers for diverse log formats, threat feeds, and telemetry sources.\nDevelop integration guides for connecting security tools with external systems (e.g., cloud platforms, identity providers, ticketing systems).\nWrite technical documentation for parser configuration, schema mapping, normalization, and enrichment workflows.\nTest and validate parser outputs to ensure accurate data extraction and ingestion.\nContinuously improve SIEM/SOAR/XDR alert use cases and detection logic.\nCreate tutorials and walkthroughs for parser development using Python, Regex, and AI prompts.\nCollaborate with the overall Cyber Defense team to capture use cases, edge cases, and operational needs.\nMaintain integration documentation for REST APIs, webhooks, and SDKs across security platforms.\n Technical & Soft Skills:\nProven experience in technical writing and content creation for security products.\nHands-on expertise in log parsing, data normalization, and custom parser development.\nProficient with SIEM platforms, log formats (JSON, Syslog, XML), and parsing tools (Regex, Logstash) an AI prompting.\nSkilled in REST APIs, JSON schemas, and integration workflows.\nFamiliar with cloud-native security tools (AWS GuardDuty, Azure Sentinel, Google Chronicle).\nCompetent in using Git, Markdown, and documentation platforms (e.g., Confluence, DITA).\nStrong ability to translate complex technical concepts into clear, actionable content.\nExperienced in producing executive summaries and detailed technical SOPs.\nEffective team collaborator with strong communication skills.","description_format":"text","description_chars":4097,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Wholesale","Security Operations"],"lifecycle":[{"event":"open","at":"2026-08-19T09:39:23Z"}],"visa":[],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.466,"p_room":0.45,"age_days":58,"expected_fill_days":35,"reasons":["conf:2","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/metro-senior-soc-engineer-2","json_url":"https://alion.io/job/metro-senior-soc-engineer-2.json","meta":{"generated_at":"2026-10-18T11:50:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17611,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4153},"rest":"https://alion.io/mcp/rest/get_company?id=4153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmetro-senior-soc-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmetro-senior-soc-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmetro-senior-soc-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/metro-senior-soc-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmetro-senior-soc-engineer-2"}]}