{"id":4091409,"url":"https://alion.io/job/ubq-io-soc-analyst","title":"SOC Analyst","company":{"id":4535160,"name":"ubq.io","domain":"ubq.io","url":"https://alion.io/company/ubq-io","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Machine Learning","optional":false},{"name":"MITRE ATT&CK","optional":true},{"name":"SIEM","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-11T17:23:02Z","employer_posted_date":null,"last_verified_at":"2026-11-11T17:23:02Z","board_verified":false,"closed_at":null,"days_open":0,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":0},"description":"About UBQ.io\nUBQ.io is a global technology service provider dedicated to building a more sustainable, independent, and equitable future. We partner with global companies across industries, including AI, blockchain, software, biotech, and education, to transform bold ideas into real, meaningful solutions.\nOur expertise spans technology consulting, AI and Machine Learning development, Blockchain integration, and global team collaboration. With a worldwide network of specialists, we help organizations stay ahead in a rapidly evolving digital landscape.\nAt UBQ.io, we don't just advise, we collaborate. Our commitment to innovation, sustainability, and social responsibility guides everything we do as we help clients build technologies that empower people, communities, and industries to thrive.\n\nAbout the role\nThe SOC Analyst is responsible for the continuous monitoring, triage, and investigation of security events across the organization's environment, as part of a global follow-the-sun Security Operations Center. This position covers the 04:00–13:00 UTC shift and reports to the SOC Lead. The role goes beyond acknowledging alerts: the focus is on understanding what each alert means, investigating suspicious activity end to end, responding to real threats, and handing over cleanly between regions so that nothing is lost across shifts. The ideal candidate has solid SOC experience, a strong investigative mindset, and thrives in a fast-paced, fully remote setting where accuracy, discipline, and security are essential. Hands-on engineering experience with core security platforms is a big plus.c\n\nKey Responsibilities\nMonitor, triage, and analyze security alerts and events from the organization's security stack, including SIEM, Endpoint Detection and Response (EDR), Security Service Edge (SSE), and Web Application Firewall (WAF) platforms.\nInvestigate security incidents end to end, from initial triage through analysis, containment, eradication, and post-incident documentation, coordinating with relevant teams throughout.\nDetermine the scope, severity, and impact of security events, separating true positives from false positives and escalating confirmed incidents according to defined procedures.\nExecute response actions within the security platforms, such as isolating endpoints, blocking indicators, disabling compromised accounts, and enforcing access restrictions.\nEnsure structured, high-quality shift handovers across regions in the follow-the-sun model, so that open investigations, ongoing incidents, and pending actions continue seamlessly around the clock.\nProactively threat hunt across endpoint, network, and log data to uncover suspicious activity that existing detections may have missed, mapping findings to frameworks such as MITRE ATT&CK.\nProvide feedback on detection quality and contribute to the tuning of SIEM correlation rules, EDR custom detections, and WAF rules to reduce noise and improve coverage.\nEnrich investigations with threat intelligence, including indicators of compromise, attacker techniques, and emerging campaigns relevant to the organization.\nDevelop and maintain technical documentation, standard operating procedures, and incident response playbooks.\nCollaborate with IT, infrastructure, application, and security engineering teams to resolve incidents and support day-to-day operations.\nSupport vulnerability management and drive continuous improvement of the organization's overall security posture.\n\nQualifications\nBachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field (or equivalent practical experience).\nAt least 3 years of hands-on experience as a SOC Analyst, triaging alerts and investigating security incidents in a production environment.\nSolid working knowledge of core security technologies such as EDR, SSE, SIEM, and WAF, and of how to use them to investigate and respond to threats.\nHands-on experience implementing, configuring, and tuning these platforms, or writing and tuning detection content, is a big plus.\nExperience with incident response and threat hunting, ideally with familiarity with the MITRE ATT&CK framework.\nExperience working in a 24/7 or follow-the-sun SOC is a plus.\nExcellent understanding of network security, endpoint security, cloud security, and Zero Trust principles.\nRelevant certifications such as Security+, CySA+, GCIA, GCIH, BTL1, or vendor-specific credentials are a plus.\nStrong analytical, troubleshooting, and problem-solving skills with a high attention to detail.\nAbility to handle sensitive information responsibly and securely.\nGood written and verbal communication skills in English, and the ability to work effectively across technical and non-technical teams and across time zones.\n\nAbout You\nYou are a hands-on security analyst who wants to understand what is really happening behind an alert, rather than only closing tickets. You dig into the data, follow the evidence, and know when and how to escalate. If you have also stood up or tuned the tools you work with, or written your own detections, even better. You are structured, reliable, and comfortable working independently in a remote, follow-the-sun team, and you take pride in leaving a clear handover for the next shift. You are curious about new threats and technologies, and you enjoy working closely with both technical teams and end users to raise the security bar across the environment.","description_format":"text","description_chars":5422,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Blockchain & Crypto"],"lifecycle":[{"event":"open","at":"2026-11-11T20:09:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":29,"reasons":["seen:0","win:early"],"computed_at":"2026-11-11T21:52:37Z"},"pay":null,"html_url":"https://alion.io/job/ubq-io-soc-analyst","json_url":"https://alion.io/job/ubq-io-soc-analyst.json","meta":{"generated_at":"2026-11-11T21:52:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":43134,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4535160},"rest":"https://alion.io/mcp/rest/get_company?id=4535160"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fubq-io-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fubq-io-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fubq-io-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ubq-io-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fubq-io-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4091409}},{"tool":"search_jobs","arguments":{"company":"ubq.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4091409},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}