{"id":3703632,"url":"https://alion.io/job/mobility-global-senior-cyber-defense-analyst","title":"Senior Cyber Defense Analyst","company":{"id":98864,"name":"Mobility Global","domain":"mobilityglobal.com","url":"https://alion.io/company/mobility-global","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Google SecOps","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-11-03T17:19:57Z","employer_posted_date":null,"last_verified_at":"2026-11-03T17:19:57Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Why Mobility Global\n\nAt Mobility Global, our mission is to provide trusted information that helps billions of people build, sell, and own vehicles with confidence. As we shape the next generation of automotive intelligence through innovation, AI, and industry-leading data, we're creating new opportunities for our customers, our business, and our people.\n\nRole Summary\n\nThis role reports to the Manager, Threat Management Center and operates within Google SecOps, our unified SIEM and case management platform. You will partner closely with Cyber Defense Engineering, Cyber Threat Intelligence, and Advanced Threat Operations during incident response, exercise significant independent judgment on incidents affecting multiple teams and systems, and mentor other responders across the function.\n\nKey Responsibilities\n\nServe as the Threat Management Center's subject matter expert for incident response, leading end-to-end investigation, containment, eradication, and recovery for confirmed security incidents.\nValidate and provide feedback on findings from the AI Alert Triage and Investigation Agent, helping tune agent logic and strengthen the handoff between autonomous triage and human-led response.\nLead incident command for significant and multi-system incidents, coordinating with Cyber Defense Engineering, Cyber Threat Intelligence, Advanced Threat Operations, IT, and business stakeholders as needed.\nExercise significant independent judgment to scope, prioritize, and direct the response strategy for complex or ambiguous incidents escalated from automated detection.\nOwn and lead investigations into insider risk and fraud cases end to end, partnering with Insider Threat Engineering, Legal, and HR on findings and remediation.\nDefine, mature, and lead continuous improvement of the incident response SOPs, runbooks, and playbooks that set the standard for the broader team.\nAuthor detailed root cause analyses and lessons-learned reports for significant incidents, and present findings and remediation recommendations to engineering and leadership.\nPartner with Advanced Threat Operations on complex, multistage investigations requiring forensic analysis, threat hunting, or malware reverse engineering, contributing incident context and supporting coordinated remediation.\nBuild trusted partnerships with Cyber Defense Engineering, translating incident findings into improved detection content, data quality, and SIEM onboarding.\nPartner with Cyber Threat Intelligence to incorporate adversary TTPs and indicators into active investigations and influence detection priorities.\nMentor and develop other incident responders within the Threat Management Center, building technical capability and response consistency across the team.\n\nRequired Qualifications\n\n5+ years of hands-on experience in incident response, with demonstrated ownership of investigations from detection through recovery.\nDemonstrated experience leading incident command for complex, multi-system security incidents, coordinating response across technical and business stakeholders.\nDeep understanding of attacker tactics, techniques, and procedures, and the MITRE ATT&CK framework, applied to real-world investigations.\nExperience conducting end-to-end investigations in a SIEM or XDR platform (Google SecOps/Chronicle, Splunk, Microsoft Sentinel, or similar), correlating evidence across endpoint, network, cloud, and identity telemetry.\nProven ability to define and mature incident response SOPs, runbooks, and playbooks adopted across a security team.\nExperience mentoring other incident responders or security analysts and developing technical capability within a function.\nExperience investigating insider risk or fraud cases involving coordination with Legal, HR, and business stakeholders.\nExcellent written and verbal communication skills, including the ability to present root cause analysis and recommendations to technical and executive audiences.\nWorking knowledge of AI and AI agents, including how agentic SOC capabilities perform automated alert triage and investigation, and the ability to evaluate, validate, and provide feedback on AI-generated findings.\n\nExpected Hours of WorkThis is a full-time position. Work is generally performed Monday through Friday, with required participation in a rotating on-call schedule to lead response for significant incidents outside business hours, including nights, weekends, and holidays.\n\nTravel Requirements\n\nUp to 10% of domestic and international travel may be required. Travel may include team meetings, training events, leadership workshops, cybersecurity conferences, and operational reviews.\n\nThis is a hybrid role with in-office expectations determined by location and subject to change based on evolving business needs.\n\nWhat's In It For You\n\nCompetitive compensation package, including base salary and incentive opportunities where applicable.Comprehensive health and wellness benefits for employees and eligible dependents.Retirement savings programs, including company matching contributions where available.\n\nEqual Opportunity Employer\n\nMobility Global is proud to be an Equal Opportunity Employer. We value diverse perspectives and are committed to fostering an inclusive workplace where everyone is respected, supported, and empowered to succeed. We provide reasonable accommodations throughout the hiring process and employment for qualified individuals with disabilities.\n\nRecruitment Fraud AlertMobility Global will never ask candidates to pay money at any stage of the hiring process, including for applications, interviews, background checks, training, or equipment. If you receive a suspicious communication or request for payment or personal financial information, please exercise caution and report it immediately.","description_format":"text","description_chars":5777,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Incident Response","Virtual Events"],"lifecycle":[{"event":"open","at":"2026-11-03T20:09:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["seen:1","win:early"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/mobility-global-senior-cyber-defense-analyst","json_url":"https://alion.io/job/mobility-global-senior-cyber-defense-analyst.json","meta":{"generated_at":"2026-11-05T22:24:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3140,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":98864},"rest":"https://alion.io/mcp/rest/get_company?id=98864"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmobility-global-senior-cyber-defense-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmobility-global-senior-cyber-defense-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmobility-global-senior-cyber-defense-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mobility-global-senior-cyber-defense-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmobility-global-senior-cyber-defense-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3703632}},{"tool":"search_jobs","arguments":{"company":"mobilityglobal.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3703632},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}