{"id":2912609,"url":"https://alion.io/job/nopalcyber-senior-security-analyst-soc","title":"Senior Security Analyst -SOC","company":{"id":3806513,"name":"NopalCyber","domain":"nopalcyber.com","url":"https://alion.io/company/nopalcyber","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Zoho Recruit","truth_index":{"grade":"C","score":65,"open_postings":12,"ghost_share":0.583,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18000,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-05-08T00:00:00Z","employer_posted_date":"2026-05-08","last_verified_at":"2026-10-21T06:03:40Z","board_verified":true,"closed_at":null,"days_open":166,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":166},"description":"Role Overview:\nThe Senior Security\nAnalyst-SOCis responsible for the\nend-to-end management of Data Loss Prevention operations across the enterprise.\nThis role focuses on investigating DLP alerts generated across cloud, email,\nendpoint, OT, and removable media channels, handling DLP incidents from detection\nthrough remediation, and ensuring data security policies are effectively\nenforced. The analyst serves as a technical escalation point from L1 and\ncollaborates closely with the Security Operations Center, Incident Response, Compliance,\nteams to protect sensitive organizational data from unauthorized access,\nleakage, or exfiltration.\nThe ideal candidate\nbrings deep hands-on expertise with industry-leading DLP platforms and\ndemonstrates the ability to independently manage the full DLP lifecycle from\npolicy creation and tuning to alert investigation, incident response, and\nstakeholder reporting with minimal supervision.\nKey Responsibilities:\nMonitor\nand investigate DLP alerts across cloud, email, endpoint, OT, and USB/removable\nmedia channels on a day-to-day basis.\nPerform\nend-to-end DLP incident handling: triage, investigation, root cause analysis,\ncontainment, remediation, and closure.\nClassify\nincidents by severity and data sensitivity, escalate critical incidents to the\nStakeholders or management per defined SLAs\nCorrelate\nDLP findings with identity, endpoint, and cloud telemetry to establish full\nincident context and impact.\nMaintain\naccurate, detailed documentation of investigations, timelines, and remediation\nactions.\nPrepare\nregular DLP operational reports covering alert volumes, incident trends, false\npositive rates, and policy effectiveness\nParticipate\nin post-incident reviews and contribute to lessons-learned and improvement\ninitiatives\nDesign,\ncreate, and refine DLP policies covering cloud (CASB), email, endpoint, and\nOT/industrial environments.\nTune\nexisting DLP policies to reduce false positives, improve detection accuracy,\nand align with evolving business requirements\nMaintain\nand update DLP dictionaries, regular expressions, sensitive data identifiers,\nand classification rules.\nMonitor\nDLP platform health, connector status, and policy deployment and tool-related issues.\nRequired Qualification:\n4 to 6\nyears of hands-on experience in Data Loss Prevention, Data Security, or a\nrelated cybersecurity operations role.\nBachelor's\ndegree in Cybersecurity, Computer Science, Information Technology, or a related\nfield (or equivalent practical experience)\nProven\nexperience of handling DLP alert investigation, incident response, and\nremediation and policy creation, tuning.\nHands-on\nexperience with one or more DLP platforms: Netskope, Microsoft Purview, Forcepoint\nDLP, Palo Alto Networks \nExperience\nwith SIEM platforms (Sentinel, Splunk, QRadar) for correlating DLP events with\nbroader security telemetry.\nRelevant\nCertifications: CySA+, CCSP, CEH, GCIA, GCIH\nAny\nvendor-specific DLP certifications (Netskope, Forcepoint, Varonis, Palo Alto)\nCore Competencies:\nDeep understanding of cloud, email, endpoint,\nOT, and removable media DLP mechanisms, detection logic, and coverage gaps.\nAbility to independently create, tune,\nmaintain, and govern DLP policies aligned to regulatory and business\nrequirements\nExperience driving DLP incidents end-to-end:\nfrom initial detection through containment, user engagement, and formal closure\nSolid grasp of data classification tiers,\nsensitive data types (PII, PCI, PHI, IP), and their handling obligations\nAbility to correlate data signals across\nmultiple tools and telemetry sources to reconstruct incident timelines and\nidentify root cause\nEffective communication skills for technical\nand non-technical stakeholders \nAbility to work in a 24x7 rotational shift\nenvironment","description_format":"text","description_chars":3760,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-20T10:03:28Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":1,"p_active":0.228,"p_room":0.28,"age_days":166,"expected_fill_days":37,"reasons":["conf:3","stale_co","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/nopalcyber-senior-security-analyst-soc","json_url":"https://alion.io/job/nopalcyber-senior-security-analyst-soc.json","meta":{"generated_at":"2026-10-21T07:25:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10512,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806513},"rest":"https://alion.io/mcp/rest/get_company?id=3806513"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnopalcyber-senior-security-analyst-soc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnopalcyber-senior-security-analyst-soc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnopalcyber-senior-security-analyst-soc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nopalcyber-senior-security-analyst-soc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnopalcyber-senior-security-analyst-soc"}]}