{"id":3429414,"url":"https://alion.io/job/onsemi-security-operations-analyst","title":"Security Operations Analyst","company":{"id":58717,"name":"onsemi","domain":"onsemi.com","url":"https://alion.io/company/onsemi","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":192,"ghost_share":0,"stale_share":0.901,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Scottsdale, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":69000,"max_usd":142000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":344},"experience_years_min":1,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-28T19:10:40Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-29T04:36:34Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Position Summary\nThe Security Operations Analyst supports the detection, investigation, response, and continuous improvement of cybersecurity capabilities across enterprise environments. The role monitors security events, conducts initial investigations, supports incident response, contributes to detection and security engineering, and helps develop operational efficiencies through automation and AI-assisted processes.\nThe ideal candidate is analytical, technically curious, process-oriented, and eager to develop practical cybersecurity and AI-enabled operations expertise. This individual uses approved AI tools as an analyst accelerator, validates generated outputs, documents assumptions, and escalates decisions or risks that require senior review.\nIdeal Candidate Profile\nThe ideal candidate demonstrates sound judgment, attention to detail, a learning mindset, and ownership of assigned work. They can follow established procedures, communicate findings clearly, experiment responsibly with automation and AI, and contribute to tuning AI agents and advancing AI SOC initiatives under the guidance of senior analysts and engineering teams.\nSecurity Monitoring, Detection & Incident Response\nMonitor security platforms, dashboards, alerts, and operational reporting channels for potential cybersecurity threats and operational incidents.\nReview, triage, investigate, and validate alerts generated by SIEM, EDR, DLP, IAM, network, email, cloud, and other monitoring technologies.\nUse approved AI-assisted capabilities to summarize alerts, enrich cases, correlate evidence, develop investigative leads, and improve response speed while validating outputs against source data.\nExecute established incident response playbooks, operational procedures, escalation paths, and human-review requirements.\nSupport evidence collection, documentation, containment activities, case tracking, remediation coordination, and incident closure.\nEscalate incidents, uncertain AI outputs, access concerns, or decisions requiring advanced analysis to senior analysts and response teams.\nMaintain situational awareness of active incidents, emerging threats, and operational risks during assigned shifts.\nThreat Analysis, Hunting & AI-Augmented Detection Engineering\nCorrelate endpoint, network, identity, cloud, application, and security telemetry to identify indicators of compromise and suspicious activity.\nAssist in identifying attacker tactics, techniques, and procedures through investigative analysis, threat intelligence, and behavioral context.\nUse OSINT, threat intelligence feeds, approved AI tools, and operational reporting to support investigations and improve threat visibility.\nSupport hypothesis-driven threat hunting to identify emerging risks and previously undetected malicious behavior.\nAssist in developing, tuning, testing, and maintaining detection content, alert logic, analytics rules, dashboards, and use cases.\nUse AI as a supervised aid for query development, alert clustering, detection documentation, false-positive review, and coverage-gap analysis.\nIdentify recurring attack patterns, false positives, telemetry gaps, and opportunities to improve detection effectiveness.\nDevelop working knowledge of MITRE ATT&CK, threat modeling, NIST incident response concepts, and modern detection methodologies.\nSecurity Engineering, Automation & AI Agent Operations\nSupport deployment, configuration, maintenance, and optimization of security operations technologies and integrations.\nSupport SOAR, workflow automation, orchestration, and AI-assisted security operations initiatives.\nUse scripting, query languages, APIs, and automation tools to improve investigation workflows, reporting, enrichment, and repeatable operational tasks.\nAssist senior analysts and engineers with configuring, testing, and tuning AI agents for defined SecOps use cases such as triage, enrichment, knowledge retrieval, reporting, threat hunting, and detection support.\nHelp refine agent instructions, retrieval content, context, tool access, guardrails, escalation logic, and evaluation of test cases within approved boundaries.\nRecord agent errors, unsupported claims, inconsistent results, access issues, and workflow failures; provide structured feedback for tuning and improvement.\nValidate AI-agent outputs against authoritative telemetry and case evidence before they are used in investigations or operational decisions.\nCollaborate with engineering and security teams to improve visibility, strengthen controls, and evaluate emerging AI-driven security capabilities.\nAI SOC Innovation & Continuous Improvement\nContribute to AI SOC initiatives by helping identify repeatable analyst pain points, candidate use cases, automation opportunities, and measurable success criteria.\nParticipate in proofs of concept, controlled pilots, user acceptance testing, agent evaluations, and post-deployment feedback activities.\nHelp document AI-enabled workflows, expected outputs, known limitations, human-review steps, escalation paths, and fallback procedures.\nProvide analyst feedback on usability, trust, accuracy, efficiency, and operational risk to improve AI SOC capabilities.\nDemonstrate responsible experimentation, professional accountability, and willingness to learn from testing and operational outcomes.\nDocumentation, Communication & Collaboration\nProduce incident summaries, investigation reports, shift handoffs, operational updates, and concise AI evaluation findings.\nCommunicate technical findings, confidence, limitations, and recommended next steps to technical and non-technical stakeholders.\nSupport metrics for detection quality, investigation speed, automation reliability, agent accuracy, analyst adoption, and program effectiveness.\nPartner with security, infrastructure, engineering, risk, privacy, legal, and business teams as appropriate to support cybersecurity and AI SOC initiatives.\n 1-3 years of experience in Security Operations, Incident Response, IT Operations, Security Engineering, or a related cybersecurity environment.\nExperience monitoring, triaging, investigating, and escalating security events using established operational processes.\nExperience supporting incident response and documenting investigations through closure.\nAbility to work independently on assigned tasks while collaborating effectively within a team and escalating when appropriate.\nFoundational understanding of security operations, threat detection, incident response, security engineering, and responsible use of automation or AI.\nWorking knowledge of networking, authentication, operating systems, cloud technologies, and enterprise security controls.\nFamiliarity with Windows, Linux/Unix, macOS, and cloud computing platforms.\nExperience with technologies such as SIEM, EDR, IDS/IPS, DLP, SOAR, email security, IAM, vulnerability management, and log analysis platforms.\nUnderstanding of indicators of compromise, attack methodologies, detection logic, and basic malware concepts.\nStrong analytical, problem-solving, communication, collaboration, prioritization, and documentation skills.\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience.","description_format":"text","description_chars":7242,"description_truncated":false,"requirements":{"experience_years_min":1,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Hardware","Electrical & Electronic Engineering","Incident Response","Power Supplies & Power Electronics"],"lifecycle":[{"event":"open","at":"2026-10-28T23:47:52Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/onsemi-security-operations-analyst","json_url":"https://alion.io/job/onsemi-security-operations-analyst.json","meta":{"generated_at":"2026-10-29T06:02:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9208,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58717},"rest":"https://alion.io/mcp/rest/get_company?id=58717"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonsemi-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonsemi-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonsemi-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onsemi-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonsemi-security-operations-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3429414}},{"tool":"search_jobs","arguments":{"company":"onsemi.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3429414},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}