{"id":568257,"url":"https://alion.io/job/onsemi-sr-security-operations-engineer","title":"SR Security Operations Engineer","company":{"id":58717,"name":"onsemi","domain":"onsemi.com","url":"https://alion.io/company/onsemi","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":77,"open_postings":170,"ghost_share":0,"stale_share":0.906,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":22000,"max_usd":47000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DLP","optional":false},{"name":"IAM","optional":false},{"name":"Linux","optional":false},{"name":"Machine Learning","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Windows","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"RAG","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-08-11T00:00:00Z","employer_posted_date":"2026-08-11","last_verified_at":"2026-10-22T01:45:47Z","board_verified":true,"closed_at":null,"days_open":72,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":72},"description":"Job Summary:\nThe ideal candidate is a self-motivated security professional who consistently delivers high-quality results, demonstrates strong ownership of investigations and operational outcomes, proactively identifies opportunities for improvement, mentors team members, and effectively leverages automation and AI technologies to enhance security operations, threat detection, and incident response capabilities.\nApply if you are looking for a challenging opportunity to drive direction and participate in the dynamic growth in IT security at onsemi, voted the World’s Most Ethical Company for 5 years in a row.\nPerformance Objectives\nSecurity Operations, Detection & Incident Response\nLead the monitoring, analysis, investigation, and response of cybersecurity threats and security incidents across enterprise environments.\nPerform advanced triage and investigation of alerts generated by SIEM, EDR, DLP, IAM, cloud security, email security, network security, and other enterprise security technologies.\nConduct comprehensive incident investigations, including threat validation, scope determination, timeline reconstruction, impact assessment, root cause analysis, and containment recommendations.\nServe as an escalation point for junior analysts and assist with complex incidents requiring advanced analytical and technical expertise.\nCoordinate response activities across Security Operations, Infrastructure, Security Engineering, Legal, and business stakeholders.\nDrive incidents through the complete lifecycle from detection through remediation, recovery, documentation, and lessons learned.\nMaintain situational awareness of the evolving threat landscape, emerging risks, and active incidents affecting the organization.\nThreat Hunting, Analysis & Detection Engineering\nPerform proactive threat hunting across endpoint, identity, network, cloud, application, and emerging technology environments to identify malicious activity beyond alert-driven detection.\nLeverage threat intelligence, behavioral analytics, telemetry correlation, and adversary tradecraft analysis to identify indicators of compromise (IOCs) and attacker tactics, techniques, and procedures (TTPs).\nInvestigate sophisticated attack techniques including credential theft, ransomware, insider threats, business email compromise, cloud compromise, and living-off-the-land activity.\nDesign, develop, tune, validate, and maintain detection content, analytics rules, dashboards, correlation logic, and threat-driven use cases.\nContinuously improve detection coverage through threat modeling, attack simulation findings, incident lessons learned, and intelligence-driven prioritization.\nUtilize frameworks such as MITRE ATT&CK, NIST 800-61, Cyber Kill Chain, and adversary emulation methodologies to improve detection and response effectiveness.\nIdentify gaps in telemetry, monitoring coverage, and response capabilities while recommending improvements to increase operational maturity.\nDigital Forensics & Advanced Investigation\nSupport digital forensic investigations involving enterprise collaboration and communication.\nAssist with malware triage, indicator extraction, timeline development, and root cause determination.\nDevelop investigative methodologies that improve repeatability, consistency, and overall investigative effectiveness.\nSecurity Engineering, Automation & AI-Enabled Operations\nLead efforts to enhance and optimize security tools, telemetry pipelines, integrations, and monitoring capabilities.\nSupport onboarding of new data sources, cloud platforms, applications, and infrastructure services into enterprise security monitoring solutions.\nDevelop and maintain automation workflows, orchestration capabilities, and machine-driven response processes using SOAR and related technologies.\nLeverage scripting, query languages, and security automation techniques to improve detection, investigation, reporting, and operational efficiency.\nUtilize artificial intelligence, machine learning technologies, large language models (LLMs), agentic frameworks, and AI-assisted workflows to accelerate investigations and improve analyst effectiveness.\nContribute to secure AI adoption by helping evaluate AI-related risks, controls, governance requirements, and monitoring capabilities.\nIdentify opportunities to increase operational efficiency through automation, AI augmentation, and process optimization.\nLeadership, Mentorship & Operational Excellence\nAct as a senior resource and mentor for junior and mid-level analysts.\nProvide investigative guidance, technical coaching, and peer review of incident investigations and response activities.\nDemonstrate ownership and accountability for operational outcomes while consistently contributing to team objectives and strategic initiatives.\nServe as a trusted advisor during major incidents and provide actionable recommendations to leadership.\nLead or participate in tabletop exercises, purple-team engagements, operational readiness testing, and post-incident reviews.\nDrive continual improvement of security operations processes, playbooks, detection content, threat hunting methodologies, and incident response procedures.\nMaintain a strong commitment to operational excellence, continuous learning, and technical leadership within the team.\nDocumentation & Communication\nProduce high-quality investigation reports, executive summaries, incident briefings, and post-incident analyses.\nCommunicate technical findings, risk implications, and recommended actions to both technical and executive audiences.\nDevelop and maintain operational procedures, playbooks, runbooks, standards, and knowledge management documentation.\nContribute to security metrics, reporting, operational dashboards, and program maturity assessments.\nRequirements:\nExperience\n5+ years of experience in Security Operations, Incident Response, Threat Hunting, Detection Engineering, Digital Forensics, Security Engineering, or a related cybersecurity discipline.\nDemonstrated experience leading complex investigations and coordinating response activities for high-priority cybersecurity incidents.\nProven ability to independently manage investigative workstreams and drive incidents through resolution.\nExperience mentoring analysts and contributing to operational maturity initiatives.\nTechnical Knowledge\nStrong understanding of cybersecurity operations, threat detection, threat hunting, incident response, security engineering, and digital forensic principles.\nAdvanced knowledge of networking, operating systems, authentication technologies, cloud computing, enterprise infrastructure, and security controls.\nExperience investigating activity across Windows, Linux, macOS, Microsoft 365, Azure, AWS, identity platforms, and cloud-native technologies.\nHands-on experience with SIEM, EDR, SOAR, IAM, DLP, email security, cloud security, vulnerability management, and threat intelligence platforms.\nUnderstanding of malware behavior, forensic artifacts, attack methodologies, post-exploitation techniques, and attacker tradecraft.\nEducation\nBachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience.\nPreferred Qualifications\nExperience with EDR, Anti-virus solutions, SIEM, email security, vulnerability and penetration testing platforms, and other enterprise security platforms.\nProficiency with scripting languages, e.g. Python, PowerShell, bash, or similar languages.\nExperience with digital forensics technologies and investigative methodologies.\nExperience with security automation, SOAR, orchestration, and AI-assisted security operations.\nFamiliarity with large language models (LLMs), agentic AI frameworks, retrieval-augmented generation (RAG), AI governance, and secure AI architecture.\nExperience conducting advanced threat hunting and detection engineering activities.\nExperience operating in cloud-first and hybrid enterprise environments.\nKnowledge of MITRE ATT&CK, NIST 800-61, CIS Controls, Zero Trust, and modern cyber defense frameworks.\nIndustry certifications such as GCIA, GCIH, CISSP, CySA+, or equivalent.\nonsemi (Nasdaq: ON) is driving disruptive innovations to help build a better future. With a continued focus on the automotive and industrial end-markets, onsemi is accelerating change and driving disruptive innovation towards a sustainable ecosystem in high-growth megatrends such as vehicle electrification, advanced safety, alternative energy, and factory automation. With a highly differentiated and innovative product portfolio, onsemi creates intelligent power and sensing technologies that solve the world’s most complex challenges and leads the way in creating a safer, cleaner, and smarter world. Today, the industrial and automotive end-markets are responsible for two-thirds of global greenhouse gas emissions, providing an immense opportunity for onsemi to do its part in achieving a net-zero economy with its intelligent power and sensing technologies. Climate change presents not only a risk to the environment, but also opportunities for innovative business solutions, and onsemi is committed to applying its research and design expertise and adapting its own operations to achieve net-zero emissions by 2040.","description_format":"text","description_chars":9251,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Analog & Power Semiconductors","Machine Vision & 3D Cameras"],"lifecycle":[{"event":"open","at":"2026-09-09T10:48:14Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.397,"p_room":0.28,"age_days":71,"expected_fill_days":26,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/onsemi-sr-security-operations-engineer","json_url":"https://alion.io/job/onsemi-sr-security-operations-engineer.json","meta":{"generated_at":"2026-10-22T05:10:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5913,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58717},"rest":"https://alion.io/mcp/rest/get_company?id=58717"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonsemi-sr-security-operations-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonsemi-sr-security-operations-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonsemi-sr-security-operations-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onsemi-sr-security-operations-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonsemi-sr-security-operations-engineer"}]}