{"id":3330978,"url":"https://alion.io/job/socradar-senior-cyber-intelligence-operation-engineer","title":"Senior Cyber Intelligence & Operation Engineer","company":{"id":694197,"name":"SOCRadar","domain":"socradar.io","url":"https://alion.io/company/socradar","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["PH"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"LLM","optional":false},{"name":"Machine Learning","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Self-Healing","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-27T11:12:16Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-03T08:09:26Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Build a great career with SOCRadar\nSOCRadar is poised for continued success with a relentless focus on innovation, global expansion, and feature-rich multifunctionality. Our mission is to empower organizations to stay ahead of evolving cyber threats. Enterprises around the world are increasingly selecting SOCRadar to achieve proactive security by understanding their attack surface and gaining automation-enabled visibility into surface, deep, and dark web. SOCRadar users leverage our expertise and investment in scalable, innovative Extended Threat Intelligence (XTI) solutions to protect their most valuable assets: brand reputation, employees, customers, and overall business operations.\nWhat willSenior Cyber Intelligence and Operations Engineer do\nSenior Cyber Intelligence and Operations Engineer specializing in threat intelligence enablement, delivering end-to-end technical solutions that help customers achieve accurate, noise-free security monitoring while maximizing platform adoption and retention through automation, custom tooling, and proactive intelligence services.\nCore Service Areas:\n Technical Onboarding & ConfigurationAudit and fine-tune customer digital footprints for comprehensive threat surface coverage\nConfigure and optimize alert rules, detection logic, and DRP (Digital Risk Protection) settings\nDesign custom monitoring parameters tailored to customer risk profiles and industry requirements\nAdvise customers on security best practices and platform optimization strategies\nEnsure accurate, noise-free monitoring from day one through meticulous configuration management\nDevelop and deliver technical onboarding documentation and configuration guides\n\nProfessional Services & Intelligence DeliveryEnhanced Alert Synthesis: Aggregate, correlate, and contextualize security alerts across multiple sources\nManaged Intelligence Services: Provide continuous threat monitoring and analysis as an extension of customer SOC teams\nDeep-Dive Analyses: Conduct comprehensive investigations into complex threats, incidents, and adversary campaigns\nDigital Footprint Enrichment: Expand and refine monitored assets through reconnaissance and discovery techniques\nVIP Analysis: Deliver executive protection intelligence and targeted threat assessments for high-value individuals\nAdaptive Threat Reports: Generate customized intelligence products that evolve with changing threat landscapes and customer needs\n\nCustomer Retention & SuccessTrack and analyze platform adoption metrics, user engagement patterns, and feature utilization rates\nMonitor customer satisfaction indicators and alarm quality metrics to identify risks proactively\nSurface potential churn risks early through data-driven analysis of usage and satisfaction trends\nDrive continuous engagement through proactive outreach, optimization recommendations, and value demonstrations\nStrengthen customer defenses before issues impact renewal through preventive tuning and enhancement\nDevelop retention strategies based on customer behavior analytics and feedback loops\n\nAI and Automation Tasks:\nScripting & DevelopmentDevelop custom scripts in Python, PowerShell, Bash, and other languages to automate security workflows\nCreate data parsing, transformation, and enrichment tools for threat intelligence processing\nBuild integrations between security platforms, SIEM systems, and third-party tools\nDesign API wrappers and connectors for seamless data exchange and automation\n\nAI Agent CreationDesign and implement AI-powered agents for automated threat analysis and triage\nDevelop machine learning models for alert prioritization and anomaly detection\nCreate intelligent chatbots and virtual analysts to enhance customer self-service capabilities\nBuild LLM-based tools for natural language processing of security data and report generation\n\n Automation Systems DevelopmentArchitect end-to-end automation processes for security operations workflows\nDesign SOAR (Security Orchestration, Automation and Response) playbooks and integrations\nDevelop automated reporting, notification, and escalation systems\nCreate self-healing mechanisms and adaptive response systems\nBuild continuous monitoring and optimization automation for customer environments\n\nKey Deliverables:\nFully optimized customer environments with minimal false positives and comprehensive coverage\nCustom-developed scripts, tools, and automation solutions tailored to customer requirements\nAI-powered agents and intelligent systems that enhance operational efficiency\nRegular threat intelligence reports and strategic security recommendations\nProactive customer engagement strategies that drive retention and platform value\nDocumented best practices, configuration standards, and technical guides","description_format":"text","description_chars":4735,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Philippines","iso":"PH","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-27T12:05:58Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":6,"expected_fill_days":32,"reasons":["conf:2","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/socradar-senior-cyber-intelligence-operation-engineer","json_url":"https://alion.io/job/socradar-senior-cyber-intelligence-operation-engineer.json","meta":{"generated_at":"2026-11-03T10:18:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14303,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":694197},"rest":"https://alion.io/mcp/rest/get_company?id=694197"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsocradar-senior-cyber-intelligence-operation-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsocradar-senior-cyber-intelligence-operation-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsocradar-senior-cyber-intelligence-operation-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/socradar-senior-cyber-intelligence-operation-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsocradar-senior-cyber-intelligence-operation-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3330978}},{"tool":"search_jobs","arguments":{"company":"socradar.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3330978},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}