{"id":2446344,"url":"https://alion.io/job/sisa-soc-l1","title":"SOC L1","company":{"id":2144267,"name":"SISA","domain":"sisa.ai","url":"https://alion.io/company/sisa-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":500000,"max":800000,"currency":"INR","period":"year","gross":null,"usd_annual":8378},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-09-09T04:42:15Z","employer_posted_date":"2026-09-09","last_verified_at":"2026-10-14T10:48:24Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"Job Description\nThe SOC Analyst L1 is responsible for real-time monitoring, triage, and initial analysis of security events and alerts generated from the IBM QRadar SIEM platform and associated security tools. This role focuses on identifying potential threats, validating incidents, and escalating genuine issues for further investigation, ensuring proactive and continuous protection of enterprise systems.\nKey Responsibilities\nMonitor, analyze, and triage security events and alerts using IBM QRadar and other integrated tools.\nIdentify false positives and validate true security incidents for escalation to L2 analysts.\nPerform initial investigation and categorization of QRadar offenses based on severity and priority.\nFollow defined SOC processes, playbooks, and standard operating procedures (SOPs).\nDocument incident details and maintain accurate records in the incident management system (e.g., ServiceNow, JIRA).\nConduct regular health checks of the QRadar environment - event flow, EPS utilization, and log source connectivity.\nCollaborate with the infrastructure and security teams to ensure uninterrupted log collection and alerting.\nAssist with correlation rule testing and detection use case validation.\nParticipate in knowledge sharing, shift handovers, and daily SOC briefings.\nStay up to date with emerging cyber threats and QRadar enhancements.\nRequired Technical Skills\nBasic understanding of IBM QRadar SIEM - offense management, event viewer, and log activity.\nKnowledge of networking concepts - TCP/IP, DNS, HTTP/S, SMTP, VPN, Firewalls.\nFamiliarity with endpoint security, IDS/IPS, and antivirus solutions.\nAwareness of cyber attack methodologies and the MITRE ATT&CK framework.\nUnderstanding of the incident response lifecycle (Detection, Analysis, Containment, Recovery).\nStrong analytical, problem-solving, and communication skills.\nAbility to work in a 24x7 rotational shift SOC environment.\nQualifications & Certifications\nBachelor’s degree in Computer Science, Information Technology, or Cybersecurity.\n2-4 years of experience in SOC or security monitoring roles.\nPreferred certifications: IBM QRadar Fundamental, CompTIA Security+, EC-Council CSA, CCNA Security.","description_format":"text","description_chars":2193,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Artificial Intelligence","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T13:38:21Z"}],"visa":[],"liveness":{"score":32,"band":"fade","label":"Fading","p_open":1,"p_active":0.578,"p_room":0.55,"age_days":35,"expected_fill_days":29,"reasons":["conf:0","win:tail","comp:junior"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":8378,"is_top_pay":false},"html_url":"https://alion.io/job/sisa-soc-l1","json_url":"https://alion.io/job/sisa-soc-l1.json","meta":{"generated_at":"2026-10-14T11:25:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"assistant_verified","counted_by":"address","units_charged":1,"used_today":2053,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2144267},"rest":"https://alion.io/mcp/rest/get_company?id=2144267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsisa-soc-l1"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsisa-soc-l1"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsisa-soc-l1"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sisa-soc-l1\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsisa-soc-l1"}]}