{"id":1411683,"url":"https://alion.io/job/sonoco-products-company-offensive-security-analyst","title":"Offensive Security Analyst","company":{"id":1821341,"name":"Sonoco","domain":"sonoco.com","url":"https://alion.io/company/sonoco-com","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":67,"ghost_share":0,"stale_share":0.866,"repost_share":0,"time_to_fill_p50_days":30,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15500,"max_usd":34000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Scrum","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2025-02-14T00:00:00Z","employer_posted_date":"2025-02-14","last_verified_at":"2026-10-22T04:09:00Z","board_verified":true,"closed_at":null,"days_open":615,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":614},"description":"Primary Responsibilities:\nPlan, conduct, and document iterative, hypothesis-based threat hunts.\nAnalyze and investigate anomalies for potential risk across the full spectrum of cyber threats.\nReview and analyze Security Information and Event Management (SIEM) alerts to develop hunt hypotheses.\nPropose, discuss, and document custom searches for automated detection of threat actor activity based on hunt findings.\nUtilize open-source intelligence to inform hunt hypothesis development.\nTrack and document cybersecurity incidents from detection to resolution.\nProvide computer forensic support during investigations, including evidence seizure, computer forensic analysis, and data recovery.\nConduct malware analysis including static and dynamic analysis of complex malware.\nProactively assess the compute environment for patterns and anomalies, tagging events for Tier 1 & 2 monitoring.\nCollect and analyze data from compromised systems using EDR agents and custom scripts.\nAttend daily Agile Scrum meeting and report progress on activities.\nSupport the development of deliverables including Hunt Hypotheses, Hunt Reports, Detection Logic, and Incident Reports.\nRespond to cybersecurity major incidents and assist with mitigation, remediation, and post incident reviews. Knowledge & Skills Required:\nMinimum of 5 years of experience in cybersecurity threat hunting or incident response roles.\nProficiency with threat hunting methodologies, tools, and techniques.\nExperience with IT Service Management ticketing systems (ServiceNow preferred).\nStrong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory.\nAdvanced knowledge of Security Information and Event Management (SIEM) systems.\nExperience with Endpoint Detection and Response (EDR) agents such as CrowdStrike.\nAbility to conduct malware analysis, including static and dynamic analysis.\nExcellent communication and teamwork skills. Education Required: High school or GED Education Preferred:\nBachelor’s degree in computer science, computer engineering, software engineering, cybersecurity, or related field.\nCybersecurity focused certifications such as GCIA, GSEC, GMON, Security+ Experience: 5-8 years\nWe are an equal opportunity employer, and we strictly prohibit and do not tolerate discrimination against employees, applicants or any other covered persons because of race, color, religion, national origin or ancestry, sex, pregnancy, sexual orientation, marital status, gender identity or expression, age, disability, genetic information, veteran status, or any legally protected characteristic.","description_format":"text","description_chars":2633,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Penetration Testing","Plastics & Polymers","Paper & Pulp Manufacturing","Incident Response"],"lifecycle":[{"event":"open","at":"2026-09-28T19:19:19Z"}],"visa":[],"liveness":{"score":4,"band":"cold","label":"Long shot","p_open":1,"p_active":0.138,"p_room":0.28,"age_days":614,"expected_fill_days":30,"reasons":["conf:3","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/sonoco-products-company-offensive-security-analyst","json_url":"https://alion.io/job/sonoco-products-company-offensive-security-analyst.json","meta":{"generated_at":"2026-10-22T04:48:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5397,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1821341},"rest":"https://alion.io/mcp/rest/get_company?id=1821341"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsonoco-products-company-offensive-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsonoco-products-company-offensive-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsonoco-products-company-offensive-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sonoco-products-company-offensive-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsonoco-products-company-offensive-security-analyst"}]}