{"id":3833687,"url":"https://alion.io/job/outsourced-cyber-analyst","title":"Cyber Analyst","company":{"id":50088,"name":"Outsourced","domain":"outsourced.ph","url":"https://alion.io/company/outsourced","size_band":"501-1000","is_staffing_agency":false,"employer_type":"staffing","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon ECS","optional":false},{"name":"GCP","optional":false},{"name":"Human-in-the-Loop","optional":false},{"name":"LLM","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"TheHive","optional":false}],"status":"live","first_seen_at":"2026-11-05T17:30:38Z","employer_posted_date":null,"last_verified_at":"2026-11-05T17:30:38Z","board_verified":false,"closed_at":null,"days_open":1,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":1},"description":"Company Overview\n\nOutsourced is a leading ISO certified global offshore outsourcing company that provides dedicated remote staff to some of the world's leading international companies. Outsourced is recognized as one of the Best Places to Work and has achieved Great Place to Work Certification. We are committed to providing a positive and supportive work environment where all staff can thrive. As an Outsourced staff member, you will enjoy a fun and friendly working environment, competitive salaries, opportunities for growth and development, work-life balance, and the chance to share your passion with a team of over 1000 talented professionals.\n\nPosition Title: Cyber Analyst\n\nWork Arrangement: Remote - India\n\nAbout The Role\n\nAs a Cyber Analyst (CA), you sit at the human-in-the-loop (HITL) checkpoint of our SitRep generation pipeline. You will review AI-generated SitReps — both those flagged by our automated confidence gate and those in routine QA sampling — determine whether the underlying detection is a true or false positive, diagnose why the pipeline got it right or wrong, and drive permanent fixes into the system's knowledge base and agent prompts.\n\nYou are the mechanism by which a mistake happens once instead of a thousand times.\n\nKey Responsibilities\n\nSitRep Triage & Investigation\n\nReview AI-generated SitReps in our case management queue (TheHive), including escalations from low-confidence scoring, judge-model failures, and recurring-case matches\nClassify SitReps as False Positive, True Positive / Benign, or True Positive / Approved, using client context, detection logic, raw telemetry, and asset data\nInvestigate underlying security events across network, endpoint, cloud, and identity telemetry to validate or refute the AI's findings\nApprove high-quality SitReps for client delivery; correct, annotate, or escalate the rest\n\nRoot-Cause Analysis of AI Output For every false positive or benign finding, determine the failure category and drive the fix:\n\nClient condition issues — the detection is technically correct but expected/authorized in this client's environment → contribute changes to Client Notes documentation and the client-context agent prompt\nDetection logic issues — the rule itself is flawed or over-broad → contribute changes to Detection documentation and the detection agent prompt\nPayload / OCSF issues — event normalization, schema mapping, or pipeline parsing errors → contribute changes to OCSF/payload/pipeline documentation\nAsset alignment issues — asset inventory, vulnerability, or hardening context is wrong or stale → contribute changes to asset/vulnerability documentation\n\nKnowledge Base & Prompt Engineering Contributions\n\nAuthor and edit the versioned Markdown knowledge corpus (detections, OCSF mappings, asset context, client notes) that grounds every SitRep the platform generates\nPropose, test, and sign off on changes to agent prompts before they go to production — your edits are permanent improvements, subject to testing and signoff, not one-off overrides\nProvide structured feedback (analyst edits, verdict rationale) that feeds our evaluation datasets and judge-model calibration\n\nReporting & Continuous Improvement\n\nContribute to weekly triage-outcome reports used by CA Managers to identify systemic detection and content issues\nSupport monthly client-outcome reporting alongside Customer Success\nIdentify recurring failure patterns and propose upstream fixes rather than repeatedly triaging the same class of error.\n\nPreferred Qualification-\n\nExperience with OCSF (Open Cybersecurity Schema Framework) or other normalization schemas (ECS, CIM)\nExposure to LLM-based tooling in security workflows — prompt writing, output evaluation, RAG systems, or AI-assisted triage — or strong curiosity and aptitude to learn it fast\nDetection engineering experience: writing or tuning rules in Sigma, KQL, Jupyter notebooks, or vendor-native languages\nExperience writing runbooks, knowledge-base articles, or detection documentation (Markdown fluency a plus)\nFamiliarity with GCP or other cloud environments from an investigation standpoint\nScripting ability (Python) for log analysis and triage automation\nCertifications such as GCIA, GCIH, GCFA, BTL1/BTL2, or CySA+ (valued, not required)\n\nThe Ideal Candidate Will Possess:\n\nSkeptical by default, curious by nature. You don't rubber-stamp AI output, and you don't dismiss it either — you verify, then diagnose\nRoot-cause oriented. Closing a ticket isn't the goal; making the same ticket never appear again is\nA strong writer. Your notes, corrections, and documentation become the ground truth an AI system reasons from — precision matters\nComfortable with feedback loops. You'll see your own triage decisions scored, sampled, and used to improve the system, and you'll help improve the process itself\nClient-empathetic. Every SitRep lands in front of a customer; you understand that clarity and accuracy are the product\n\nWhat we Offer \n\nHealth Insurance: We provide medical coverage up to 20 lakh per annum, which covers you, your spouse, and a set of parents. This is available after one month of successful engagement.\nProfessional Development: You'll have access to a monthly upskill allowance of 5000 for continued education and certifications to support your career growth.\nLeave Policy: Vacation Leave (VL): 10 days per year, available after probation. You can carry over or encash up to 5 unused days.\nCasual Leave (CL): 8 days per year for personal needs or emergencies, available from day one.\nSick Leave: 12 days per year, available after probation.\nFlexible Work Hours or Remote Work Opportunities - Depending on the role and project.\nOutsourced Benefits such as Paternity Leave, Maternity Leave, etc.","description_format":"text","description_chars":5731,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance","Professional development"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Recruiting & Staffing","Business Process Outsourcing (BPO)","IT Staffing & Staff Augmentation"],"lifecycle":[{"event":"open","at":"2026-11-05T20:09:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/outsourced-cyber-analyst","json_url":"https://alion.io/job/outsourced-cyber-analyst.json","meta":{"generated_at":"2026-11-07T10:06:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8679,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50088},"rest":"https://alion.io/mcp/rest/get_company?id=50088"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Foutsourced-cyber-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Foutsourced-cyber-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Foutsourced-cyber-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/outsourced-cyber-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Foutsourced-cyber-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3833687}},{"tool":"search_jobs","arguments":{"company":"outsourced.ph","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3833687},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}