{"id":2771900,"url":"https://alion.io/job/ust-l3-soc-analyst","title":"L3 SOC Analyst","company":{"id":1774626,"name":"UST","domain":"ust.com","url":"https://alion.io/company/ust-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Thiruvananthapuram, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":19500,"max_usd":42000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IBM QRadar","optional":false},{"name":"LogRhythm","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-17T23:02:15Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"As a Level 3 SOC Analyst, you will serve as a senior escalation point within the Security Operations Center (SOC), responsible for leading complex investigations, mentoring junior analysts, and driving continuous improvement in threat detection and response capabilities. You will work closely with cross-functional teams to ensure rapid containment and remediation of security incidents, while contributing to the development of advanced detection logic and playbooks.\nKey Responsibilities\n- Lead the investigation, escalation, and resolution of high-impact security incidents.\n- Perform deep-dive analysis of system logs, SIEM s, and network traffic to identify sophisticated threats.\n- Architect and optimize SIEM solutions, ensuring effective data ingestion and correlation.\n- Conduct root cause analysis and post-incident reviews to identify gaps and recommend improvements.\n- Generate and present detailed incident reports and threat intelligence summaries to stakeholders.\n- Oversee the tuning of detection rules and reduction of false positives to enhance SOC efficiency.\n- Mentor and guide L1 and L2 analysts in incident handling, threat hunting, and use of security tools.\n- Develop and maintain advanced runbooks, playbooks, and response procedures.\n- Collaborate with IT and security teams to implement preventive and corrective measures.\n- Provide expert-level support in isolating and remediating complex security issues.\n- Act as a subject matter expert during red team/blue team exercises and tabletop simulations.\n- Stay current with emerging threats, vulnerabilities, and security technologies.\nExperience & Qualifications Required\n- Minimum 7 years of relevant experience in cybersecurity, with at least 1 year as an L3 SOC Analyst.\n- Must have strong IR experience and Use cases development and a bit of experience in the OT space as our business is mining, from time to time the candidate will need to develop use cases that will be relevant to OT\n- Proven expertise in incident response, threat hunting, and forensic analysis.\n- Hands-on experience with SIEM platforms such as QRadar, ArcSight, RSA NetWitness, LogRhythm, or Splunk.\n- Strong understanding of MITRE ATT&CK framework, kill chain methodology, and threat intelligence platforms.\n- Must be certified with Microsoft on the tools that are used at the SOC preferably.\n- Experience in developing and maintaining security documentation, including playbooks and runbooks.\n- Ability to work collaboratively with customer IT and security teams in high-pressure environments.\n- Excellent communication skills and ability to present technical findings to non-technical stakeholders.","description_format":"text","description_chars":2656,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-10-17T06:35:48Z"}],"visa":[],"liveness":{"score":68,"band":"ok","label":"Likely open","p_open":1,"p_active":0.761,"p_room":0.9,"age_days":9,"expected_fill_days":14,"reasons":["conf:3","win:mid","comp:brand"],"computed_at":"2026-10-18T02:17:50Z"},"pay":null,"html_url":"https://alion.io/job/ust-l3-soc-analyst","json_url":"https://alion.io/job/ust-l3-soc-analyst.json","meta":{"generated_at":"2026-10-18T02:17:50Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3771,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774626},"rest":"https://alion.io/mcp/rest/get_company?id=1774626"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fust-l3-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fust-l3-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fust-l3-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ust-l3-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fust-l3-soc-analyst"}]}