{"id":1269770,"url":"https://alion.io/job/sisa-soc-l2-qradar","title":"SOC L2- Qradar","company":{"id":2144267,"name":"SISA","domain":"sisa.ai","url":"https://alion.io/company/sisa-ai","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Keka","truth_index":{"grade":"B","score":75,"open_postings":9,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":1000000,"max":1800000,"currency":"INR","period":"year","gross":null,"usd_annual":18581},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"STIX","optional":false},{"name":"TAXII","optional":false}],"status":"live","first_seen_at":"2026-04-07T11:30:29Z","employer_posted_date":"2026-04-07","last_verified_at":"2026-10-15T13:23:20Z","board_verified":true,"closed_at":null,"days_open":191,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":190},"description":"The SOC Sr Analyst L2 serves as the escalation point for complex security incidents detected within IBM QRadar. The L2 analyst conducts deep-dive investigations, performs threat hunting, tunes correlation rules, and coordinates incident response activities. This role requires strong analytical and technical expertise in QRadar SIEM operations, along with proactive detection and threat mitigation skills.\nKey Responsibilities\nAnalyze escalated incidents and offenses from L1 analysts for deeper investigation and containment.\nPerform in-depth log correlation and timeline reconstruction using IBM QRadar.\nDevelop and fine-tune QRadar correlation rules, AQL searches, and custom use cases for improved detection.\nPerform proactive threat hunting across multiple data sources using QRadar and threat intelligence feeds.\nCoordinate response actions during security incidents, ensuring containment, eradication, and recovery.\nLead the root cause analysis (RCA) and prepare incident summary reports with actionable recommendations.\nIntegrate and validate external threat intelligence feeds (STIX/TAXII) within QRadar for advanced correlation.\nCollaborate with IT, network, and endpoint teams for incident validation and resolution.\nSupport vulnerability management, patch validation, and policy enforcement activities.\nProvide mentorship and technical guidance to L1 analysts.\nParticipate in continuous improvement initiatives for SOC processes and playbooks.\nRequired Technical Skills\nAdvanced proficiency with IBM QRadar SIEM - rule creation, offense management, AQL queries, dashboards.\nStrong understanding of network and endpoint telemetry, including firewall, proxy, and EDR logs.\nExperience with malware analysis, phishing investigation, and digital forensics concepts.\nKnowledge of scripting languages (Python, PowerShell, or Bash) for automation of analysis tasks.\nUnderstanding of threat intelligence platforms and integration mechanisms (STIX/TAXII).\nExperience in incident response processes aligned with NIST or SANS frameworks.\nAbility to work independently and collaboratively in high-pressure security incidents.\nExcellent report writing, communication, and documentation skills.\nQualifications & Certifications\nBachelor’s or master’s degree in computer science, Cybersecurity, or related discipline.\n2-5 years of experience in SOC, Incident Response, or Threat Analysis roles.\nPreferred certifications: IBM Certified Analyst - QRadar SIEM, GCIH, GCIA, CEH, CySA+, or MITRE ATT&CK Defender (MAD).","description_format":"text","description_chars":2509,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Artificial Intelligence","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-09-25T23:37:36Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.136,"p_room":0.28,"age_days":190,"expected_fill_days":29,"reasons":["conf:0","velocity","win:tail","crowd:junior"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":18581,"is_top_pay":false},"html_url":"https://alion.io/job/sisa-soc-l2-qradar","json_url":"https://alion.io/job/sisa-soc-l2-qradar.json","meta":{"generated_at":"2026-10-15T17:01:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25762,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2144267},"rest":"https://alion.io/mcp/rest/get_company?id=2144267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsisa-soc-l2-qradar"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsisa-soc-l2-qradar"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsisa-soc-l2-qradar"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sisa-soc-l2-qradar\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsisa-soc-l2-qradar"}]}