{"id":3263859,"url":"https://alion.io/job/sygnia-security-operations-center-analyst-2","title":"Security Operations Center Analyst","company":{"id":49152,"name":"Sygnia","domain":"sygnia.co","url":"https://alion.io/company/sygnia","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Austin, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":83000,"max_usd":159000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Exabeam","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-26T07:29:33Z","employer_posted_date":"2026-10-26","last_verified_at":"2026-10-31T19:48:40Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Description\nAbout Sygnia\nSygnia is a top-tier cyber technology and services company that partners with organizations around the world to proactively strengthen their cyber resilience and respond to advanced threats. We help companies prepare for and navigate cyber incidents with confidence, combining deep technical expertise with a business-driven mindset.\nOur services include strategic cybersecurity consulting, incident response, proactive security assessments, and Managed Detection and Response (MDR). Sygnia works with leading global enterprises, including Fortune 100 companies, across industries such as finance, healthcare, technology, and critical infrastructure.\nWith a team composed of elite cybersecurity professionals from military and commercial backgrounds, Sygnia delivers precision, speed, and impact when it matters most.\nThe Role\n Sygnia is looking for a Security Operations Center (SOC) Analyst to join our growing U.S. Managed Detection and Response team in Austin, Texas.\nThis is an exciting opportunity to help build Sygnia's first U.S. MDR site as we expand our global follow-the-sun operating model. You will work alongside experienced cybersecurity professionals to investigate security events, perform threat hunting, improve detection capabilities, and help protect some of the world's leading organizations.\nAs a SOC Analyst, you will leverage Sygnia's proprietary Velocity platform to monitor client environments, investigate alerts, and identify emerging threats. This is a hands-on technical role that combines security monitoring, incident investigation, detection engineering, and customer interaction.\nThis position is onsite in Austin five days per week and follows a rotating Sunday through Friday schedule to support global MDR operations.\nWhat You'll Do\nMonitor client environments using Sygnia's proprietary Velocity platform to identify, investigate, and respond to security events.\nPerform in-depth alert triage, incident investigation, and threat analysis while meeting defined service level objectives.\nConduct proactive threat hunting to identify malicious activity that may evade traditional detections.\nDifferentiate legitimate security incidents from false positives and determine appropriate response actions.\nDevelop and improve detection logic, correlation rules, and use cases to strengthen monitoring capabilities.\nCorrelate data from multiple security technologies and log sources to identify complex attack activity.\nWork closely with clients by providing timely updates, incident reports, and actionable security recommendations.\nCollaborate with senior analysts and MDR leadership to maintain high investigation quality and continuously improve operational processes.\nIdentify opportunities to automate workflows and improve the efficiency of MDR operations.\nRecommend improvements to client visibility, security monitoring, and overall security posture.\nRequirements\nWhat We're Looking For\nAt least three years of experience in a SOC, MDR, Managed EDR, or security operations environment.\nHands-on experience investigating security alerts and responding to security incidents.\nStrong analytical and problem-solving skills with the ability to work independently in a fast-paced environment.\nUnderstanding of modern cyber threats, attack techniques, and common attacker methodologies.\nExperience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, ArcSight, Exabeam, or similar technologies.\nFamiliarity with common enterprise security technologies including EDR, firewalls, Windows Event Logs, identity platforms, and network security controls.\nStrong understanding of networking fundamentals, operating systems, and enterprise security architecture.\nBasic knowledge of host-based forensics, operating system artifacts, and security event analysis.\nExperience with scripting or automation using Python or similar languages.\nAbility to communicate effectively with both technical teammates and customers.\nWillingness to work an onsite rotating schedule in Austin, including Sunday through Friday coverage as part of Sygnia's follow-the-sun MDR model.\nBonus Points For\nExperience with cloud platforms such as AWS, Azure, or Google Cloud Platform.\nExperience with detection engineering or SIEM content development.\nFamiliarity with digital forensics, malware analysis, or incident response.\nExperience working within an MSSP or MDR provider.\nWhy Sygnia\nHelp build Sygnia's first U.S. MDR site and play a foundational role in its long-term success.\nInvestigate sophisticated cyber threats affecting some of the world's leading organizations.\nWork alongside experienced incident responders, threat hunters, and cybersecurity experts.\nGain exposure to a wide variety of enterprise environments, industries, and attack scenarios.\nContribute to the evolution of Sygnia's proprietary Velocity platform and MDR capabilities.\nJoin a collaborative team that values technical excellence, continuous learning, and innovation.\nGrow your career with opportunities to expand into advanced monitoring, incident response, threat hunting, and leadership roles.","description_format":"text","description_chars":5120,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Security Operations","Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-26T07:36:15Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.9,"p_room":1,"age_days":4,"expected_fill_days":24,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/sygnia-security-operations-center-analyst-2","json_url":"https://alion.io/job/sygnia-security-operations-center-analyst-2.json","meta":{"generated_at":"2026-10-31T22:01:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":34355,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-01T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49152},"rest":"https://alion.io/mcp/rest/get_company?id=49152"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsygnia-security-operations-center-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsygnia-security-operations-center-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsygnia-security-operations-center-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sygnia-security-operations-center-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsygnia-security-operations-center-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3263859}},{"tool":"search_jobs","arguments":{"company":"sygnia.co","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3263859},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}