{"id":3881702,"url":"https://alion.io/job/netradyne-senior-security-analyst","title":"Senior Security Analyst","company":{"id":48148,"name":"Netradyne","domain":"netradyne.com","url":"https://alion.io/company/netradyne","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":90,"open_postings":5,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":75,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"Computer Vision","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DNS","optional":false},{"name":"Falcon","optional":false},{"name":"IBM QRadar","optional":false},{"name":"ISO 27001","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wazuh","optional":false},{"name":"Windows","optional":false},{"name":"IAM","optional":true},{"name":"Kubernetes","optional":true},{"name":"LangChain","optional":true},{"name":"LangGraph","optional":true},{"name":"LLM","optional":true},{"name":"NIST CSF","optional":true},{"name":"OpenAI","optional":true},{"name":"Rest API","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-11-06T14:27:38Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-09T00:23:21Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Netradyne harnesses the power of Computer Vision and Edge Computing to revolutionize the modern-day transportation ecosystem. We are a leader in fleet safety solutions. With growth exceeding 4x year over year, our solution is quickly being recognized as a significant disruptive technology. Our team is growing, and we need forward-thinking, uncompromising, competitive team members to continue to facilitate our growth.\nAbout Netradyne and the Global SOC \nNetradyne builds AI-powered video telematics and fleet safety solutions, led by its Driver-i platform, used by commercial fleets worldwide. Our environment spans cloud-native SaaS, edge IoT devices in vehicles, large volumes of video and telemetry data, and AI/ML platforms. \nThe Global SOC protects this footprint around the clock. It runs a multi-cloud SOC integrating SIEM, SOAR, threat intelligence, endpoint, identity, email, SaaS and cloud telemetry, and is moving to an AI-driven operating model with agentic triage, correlation and response under human approval controls. The SOC also supports ISO 27001 and ISO/IEC 42001 governance and the AI Security Posture Management (AISPM) program. \nRole purpose \nYou will lead investigations that L1 cannot close, drive incidents to containment, and continuously raise the quality of our detections. You will be a hands-on technical leader on shift: mentoring L1 analysts, tuning the AI-assisted triage pipeline, and turning every incident into better playbooks, detections and controls across AWS, Azure, SaaS, endpoints and our IoT fleet platform. \nKey responsibilities \nMonitoring, triage and investigation \nAct as the L2/L3 escalation point for alerts across SIEM, EDR, identity, email, SaaS and cloud security tools. \nPerform deep-dive investigations correlating logs, endpoint telemetry, network data, cloud audit trails and threat intelligence. \nValidate, enrich and prioritize alerts using a risk-based approach, and reduce false positives at source. \nReview and quality-check L1 triage decisions and AI-generated triage recommendations before closure. \nIncident response \nLead security incidents through detection, containment, eradication, recovery and post-incident review. \nCoordinate with Engineering, SRE, IT, Legal and Privacy during incidents, and communicate status clearly to SOC leadership. \nPerform host and cloud forensics triage, malware analysis at a functional level, and evidence preservation. \nWrite incident reports and root-cause analyses with concrete, tracked remediation actions. \nDetection engineering and threat hunting \nBuild, test and tune detection rules and correlation logic, mapped to MITRE ATT&CK. \nRun hypothesis-driven threat hunts across cloud, endpoint, identity and SaaS telemetry. \nTrack coverage gaps and propose new log sources, detections and use cases. \nOperationalize threat intelligence (IOCs, TTPs, advisories) relevant to SaaS, cloud and IoT environments. \nAutomation and AI-driven SOC \nDesign and improve SOAR playbooks for enrichment, triage and response. \nHelp define and validate AI agent workflows, confidence thresholds, guardrails and human-approval gates for security operations. \nMonitor AI security signals from the AISPM program, including shadow AI, unauthorized agents, unregistered MCP services and data-leakage alerts. \nProcess, metrics and mentoring \nMaintain runbooks, playbooks, escalation matrices and SOPs. \nTrack and improve SOC metrics such as MTTD, MTTR, SLA adherence and false-positive rate. \nMentor and coach L1 analysts, run shift handovers and knowledge-sharing sessions. \nProvide evidence and support for ISO 27001, ISO/IEC 42001 and customer security audits. \nRequired qualifications \nBachelor's degree in Computer Science, IT, Cybersecurity or equivalent practical experience. \n5-8 years in information security, with 3+ years in a SOC at L2 or L3. \nHands-on expertise with at least one enterprise SIEM (Splunk, Wazuh, QRadar or similar), including writing queries and detection rules. \nStrong experience with EDR/XDR platforms such as CrowdStrike Falcon or Microsoft Defender. \nSolid understanding of AWS and Azure security logging and services (CloudTrail, GuardDuty, Security Hub, Entra ID, Defender for Cloud). \nWorking knowledge of identity attacks and controls: SSO, federation, MFA, conditional access, privileged access. \nProven incident handling experience, including ransomware, phishing/BEC, account compromise and cloud misconfiguration incidents. \nGood grasp of networking (TCP/IP, DNS, HTTP/S, VPN, firewalls, proxies) and Windows, Linux and macOS internals. \nPractical use of MITRE ATT&CK, the cyber kill chain and incident response frameworks such as NIST SP 800-61. \nScripting ability in Python, PowerShell or Bash for automation and log analysis. \nClear written and verbal communication, including incident reports for technical and leadership audiences. \nPreferred qualifications \nCertifications such as GCIH, GCIA, GCFA, CySA+, BTL1/BTL2, CEH, or AWS/Azure security certifications (AWS Security - Specialty, AZ-500, SC-200). \nExperience building SOAR playbooks and integrating security tools through APIs. \nExposure to LLM-based or agentic security workflows, AI security risks (prompt injection, data leakage, model abuse) and AI governance. \nExperience securing SaaS platforms, containers and Kubernetes, or IoT and edge devices. \nDigital forensics and malware analysis skills beyond triage level. \nFamiliarity with ISO 27001, ISO/IEC 42001, SOC 2 or NIST CSF audit evidence. \nExperience in a product or SaaS company with a global, 24x7 customer base. \nTechnology environment \nSIEM and log analytics - Wazuh, Splunk, ELK \nEndpoint and XDR- CrowdStrike, Microsoft Defender \nEmail security- Proofpoint \nAutomation- SOAR, Python, REST APIs \nThreat intelligence- CTI feeds and platforms, MITRE ATT&CK \nCloud- AWS, Azure, CSPM, IAM, WAF, KMS \nIdentity- SSO and federation across AWS, Azure and SaaS \nAI and AI security- Azure OpenAI, LangGraph, AI registry, AISPM, MCP security \n Competencies and working conditions \nAnalytical rigor: follows evidence, documents reasoning, and avoids premature conclusions. \nOwnership under pressure: stays calm and decisive during live incidents. \nCommunication: explains technical risk clearly to engineers and leadership alike. \nCollaboration: works across time zones with global Engineering, IT and business teams. \nContinuous learning: keeps pace with new attack techniques, cloud services and AI security risks. \nMentoring mindset: raises the capability of the wider SOC team. \nThe role supports a 24x7 global SOC and involves rotational shifts and on-call escalation duty, including occasional weekends during major incidents. \nWe are committed to an inclusive and diverse team. Netradyne is an equal-opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status, or any legally protected status.\nIf there is a match between your experiences/skills and the Company's needs, we will contact you directly.\nNetradyne is an equal-opportunity employer.\nApplicants only - Recruiting agencies do not contact.\nRecruitment Fraud Alert!\nThere has been an increase in fraud that targets job seekers. Scammers may present themselves to job seekers as Netradyne employees or recruiters. Please be aware that Netradyne does not request sensitive personal data from applicants via text/instant message or any unsecured method; does not promise any advance payment for work equipment set-up and does not use recruitment or job-sourcing agencies that charge candidates an advance fee of any kind. Official communication about your application will only come from emails ending in ‘@netradyne.com’ or ‘@us-greenhouse-mail.io’.\nPlease review and apply to our available job openings at Netradyne.com/company/careers. For more information on avoiding and reporting scams, please visit the Federal Trade Commission's job scams website.","description_format":"text","description_chars":8053,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Fleet Management","Computer Vision","Edge AI"],"lifecycle":[{"event":"open","at":"2026-11-06T18:20:46Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":75,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/netradyne-senior-security-analyst","json_url":"https://alion.io/job/netradyne-senior-security-analyst.json","meta":{"generated_at":"2026-11-09T01:14:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2706,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":48148},"rest":"https://alion.io/mcp/rest/get_company?id=48148"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnetradyne-senior-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnetradyne-senior-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnetradyne-senior-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/netradyne-senior-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnetradyne-senior-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3881702}},{"tool":"search_jobs","arguments":{"company":"netradyne.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3881702},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}