{"id":3956424,"url":"https://alion.io/job/si2-technologies-soc-security-operations-center-lead","title":"SOC (Security Operations Center) Lead","company":{"id":4475291,"name":"SI2 Technologies","domain":"si2tech.com","url":"https://alion.io/company/si2-technologies","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":70,"open_postings":18,"ghost_share":0.5,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vadodara, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Incident Management","optional":true},{"name":"Kibana","optional":true},{"name":"Wazuh","optional":true}],"status":"live","first_seen_at":"2026-01-02T06:58:31Z","employer_posted_date":"2026-02-24","last_verified_at":"2026-11-10T02:38:54Z","board_verified":true,"closed_at":null,"days_open":312,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":311},"description":"Location: Vadodara, Gujarat\n\nJob Type: Full Time / Onsite (From Office)\n\nDepartment: IT Infrastructure\n\nShift: Rotational Shift\n\nExperience: 8-10 years of Cybersecurity, Continuous Monitoring and SOC Operations experience.\n\nJob Summary:\n\nThe SOC Lead is responsible for leading day-to-day Security Operations Center activities, managing incident response, mentoring SOC analysts, and ensuring effective monitoring, detection, and response to cybersecurity threats. This role bridges technical execution and operational leadership, ensuring continuous security monitoring and rapid incident containment.\n\nMust Have Skills:\n\nStrong knowledge of:\n\nSIEM platforms: Splunk, QRadar, Sentinel, ArcSight, etc.\n\nEDR/XDR tools: CrowdStrike, Defender, Carbon Black, etc.\n\nNetwork security: firewalls, IDS/IPS, VPNs\n\nCloud security: AWS, Azure, GCP\n\nIncident response lifecycle and digital forensics basics\n\nMITRE ATT & CK framework\n\nGood To Have Skills:\n\nWazuh\n\nKibana\n\nKey Responsibilities:\n\nLeadership & ManagementLead and manage the SOC team, including L1, L2, and L3 analysts.\n\nOversee daily SOC operations and ensure SLA compliance.\n\nProvide mentorship and training to junior analysts.\n\nIncident Response & Threat ManagementSupervise and guide the resolution of complex security incidents.\n\nDevelop and implement incident response playbooks and escalation processes.\n\nConduct advanced threat hunting and forensic investigations.\n\nSecurity Strategy & GovernanceDefine and enforce SOC policies, procedures, and best practices.\n\nEnsure compliance with regulatory and organizational security standards.\n\nCollaborate with IT, Risk, and Compliance teams to align security initiatives.\n\nMonitoring & ReportingMonitor SIEM alerts and manage escalation workflows.\n\nProduce SOC performance metrics and reports for senior leadership.\n\nContinuously improve detection and response capabilities.\n\nSOC Operations & Incident Management\n\nTeam Leadership & Mentoring\n\nThreat Detection & Improvement\n\nProactive approach to Security Strategy & Governance\n\nQualifications / Candidate Requirements (If Applicable):\n\nBachelor’s degree in computer science, Information Security, or related field.\n\nCertifications (Preferred but not Mandatory):\n\nCISSP, CISM, or equivalent preferred","description_format":"text","description_chars":2251,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","IT Consulting & Digital Transformation","Enterprise Apps Implementation Partners"],"lifecycle":[{"event":"open","at":"2026-11-09T08:43:34Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":1,"p_active":0.175,"p_room":0.28,"age_days":311,"expected_fill_days":29,"reasons":["conf:4","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-11-10T06:52:35Z"},"pay":null,"html_url":"https://alion.io/job/si2-technologies-soc-security-operations-center-lead","json_url":"https://alion.io/job/si2-technologies-soc-security-operations-center-lead.json","meta":{"generated_at":"2026-11-10T08:21:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19387,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4475291},"rest":"https://alion.io/mcp/rest/get_company?id=4475291"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsi2-technologies-soc-security-operations-center-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsi2-technologies-soc-security-operations-center-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsi2-technologies-soc-security-operations-center-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/si2-technologies-soc-security-operations-center-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsi2-technologies-soc-security-operations-center-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3956424}},{"tool":"search_jobs","arguments":{"company":"si2tech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3956424},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}