{"id":4005005,"url":"https://alion.io/job/ust-soc-analyst-l2-ibm-qradar-crowdstrike","title":"SOC Analyst L2 – IBM QRadar & CrowdStrike","company":{"id":1774626,"name":"UST","domain":"ust.com","url":"https://alion.io/company/ust-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"RippleHire","truth_index":{"grade":"B","score":76,"open_postings":95,"ghost_share":0,"stale_share":0.979,"repost_share":0,"time_to_fill_p50_days":34,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mumbai, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"IBM QRadar","optional":false}],"status":"live","first_seen_at":"2026-11-02T00:00:00Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-11T08:01:56Z","board_verified":true,"closed_at":null,"days_open":9,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":9},"description":"We are looking for an experienced SOC Analyst L2 with proficient hands-on expertise in IBM QRadar, CrowdStrike, and SOC operations. The role will focus on monitoring, investigating, and responding to cybersecurity incidents, serving as an escalation point for L1 analysts and supporting effective incident containment, remediation, documentation, and closure.\nKey ResponsibilitiesMonitor, analyze, and investigate security s using IBM QRadar and CrowdStrike.Perform L2-level SOC investigations for incidents escalated by L1 analysts.Correlate security events and logs to identify suspicious activity, indicators of compromise, and potential security incidents.Determine incident scope, severity, business impact, root cause, and attack vector.Identify true positives, false positives, and potentially malicious activities.Investigate endpoint security incidents using CrowdStrike, including process activity, file and hash information, persistence indicators, and endpoint telemetry.Use IBM QRadar for security-event analysis, correlation, investigation, and incident monitoring.Support incident containment, eradication, remediation, recovery, and closure activities.Maintain detailed investigation notes, incident timelines, evidence, reports, and audit records.Ensure effective handover of open security incidents between shifts.Prepare incident summaries and communicate findings, risks, and remediation recommendations to relevant stakeholders.Guide L1 SOC analysts on triage, security investigations, and incident-handling procedures.Contribute to SOC procedures, knowledge documentation, and continuous process improvements.Support 24x7 rotational shifts, including weekends and public holidays where required.","description_format":"text","description_chars":1717,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-10T06:37:12Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.6,"p_room":1,"age_days":9,"expected_fill_days":34,"reasons":["conf:2","stale_co","win:early","comp:brand"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/ust-soc-analyst-l2-ibm-qradar-crowdstrike","json_url":"https://alion.io/job/ust-soc-analyst-l2-ibm-qradar-crowdstrike.json","meta":{"generated_at":"2026-11-11T10:29:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17940,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1774626},"rest":"https://alion.io/mcp/rest/get_company?id=1774626"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fust-soc-analyst-l2-ibm-qradar-crowdstrike"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fust-soc-analyst-l2-ibm-qradar-crowdstrike"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fust-soc-analyst-l2-ibm-qradar-crowdstrike"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ust-soc-analyst-l2-ibm-qradar-crowdstrike\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fust-soc-analyst-l2-ibm-qradar-crowdstrike"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4005005}},{"tool":"search_jobs","arguments":{"company":"ust.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4005005},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}