SYSTEM MIGRATION ANALYST
First seen by Alion on Oct 28, 2026.
Responsible for the day-to-day operation, administration,and hardening of the system’s security tools and controls. Complements the SOCby owning security tooling health, vulnerability and patch remediation,configuration compliance, and audit readiness, so that security controls stayeffective, current, and evidenced.
Key Responsibilities:
Security Tooling Administration
Administer and maintain security platforms such as TrendMicro (Vision One, Deep Security, Apex One), Tenable, Microsoft Sentinel, andDLP tools
Deploy and upgrade agents, manage policies, and monitor toolhealth, licensing, and coverage
Onboard new servers, applications, and log sources intosecurity tooling and SIEM
Tune policies, detection rules, and exclusions incoordination with the SOC and application teams
Vulnerability & Patch Operations
Schedule and review vulnerability scans, and validate andprioritise findings by CVSS, exploitability, and asset criticality
Raise remediation tickets, track them to closure, andescalate overdue items
Coordinate patch cycles with infrastructure and applicationteams, including emergency patching
Manage risk acceptance and exception requests withsupporting justification
Hardening & Configuration Compliance
Apply and verify security baselines (e.g. CIS benchmarks forRHEL, Windows, and cloud) across servers and cloud workloads
Assess the application impact of hardening controls withapplication teams before rollout
Monitor configuration drift and track remediation ofnon-compliant assets
Access & Identity Security
Support periodic access reviews, privileged account audits,and user access recertification
Review IAM roles and policies (e.g. AWS) againstleast-privilege principles
Monitor certificate expiry, key management, and secretshygiene
Incident Support
Support the SOC and incident response team withinvestigation data, tool queries, and containment actions
Contribute to post-incident reviews and implement resultingcontrol improvements
Governance, Reporting & Audit
Prepare regular reports on patch compliance, vulnerabilitytrends, hardening status, and tool coverage
Collect and maintain evidence for audits and compliancechecks (e.g. ISO 27001, government security standards)
Maintain security SOPs, runbooks, and the security riskregister
Track security-related change requests and participate inchange advisory discussions
Qualifications:
Diploma or Bachelor’s degree in Cybersecurity, IT, ComputerScience, or a related field (or equivalent experience)
3-5 years in security operations, security administration,or infrastructure security
Hands-on experience administering endpoint, XDR, orvulnerability management tools (Trend Micro and Tenable preferred)
Experience with patch management and configuration hardeningon Linux (RHEL preferred) and Windows
Working knowledge of AWS security services and sharedresponsibility model
Preferred certifications: CompTIA Security+, CISSP(associate or full), Microsoft SC-200, AWS Security Specialty
Nice to have: CISM, CISA, ISO 27001 Lead Implementer,Tenable certifications
Skills:
Strong understanding of security frameworks and standards(CIS, NIST, ISO 27001, MITRE ATT&CK)
Familiarity with SIEM, EDR/XDR, DLP, WAF, firewalls, andvulnerability scanners
Scripting and automation (Bash, PowerShell, Python, Ansible)for compliance checks and reporting
Working knowledge of ITSM tools (e.g. ServiceNow) and changemanagement processes
Strong analytical and documentation skills, with the abilityto explain risk to technical and non-technical stakeholders
Ability to drive remediation across multiple teams andvendors
Skills
Applications, Security Tools, Technology Risk Management, Remediation, Regulatory Compliance, Security Framework, DLP, Patch Management, IT knowledge, SoC, Cybersecurity, Agent Management System, Ansible, Drive Awareness, Security Platform, Validation Studies