{"id":122328,"url":"https://alion.io/job/visionet-systems-soc-analyst","title":"SOC Analyst","company":{"id":3216,"name":"Visionet Systems","domain":"visionet.com","url":"https://alion.io/company/visionet-systems","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"IAM","optional":false},{"name":"Incident Management","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-25T09:53:45Z","employer_posted_date":null,"last_verified_at":"2026-08-25T09:53:45Z","board_verified":false,"closed_at":null,"days_open":53,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":53},"description":"The SOC Analyst is responsible for continuous security monitoring, alert triage, incident investigation, and Incident Response (IR) activities across the organisation's environment. The role involves identifying, analysing, containing, eradicating, and recovering from cybersecurity incidents while ensuring proper execution of all Incident Response lifecycle processes.\nThe SOC Analyst will investigate alerts, incidents, and security incidents generated from SIEM platforms and ticketing systems, perform proactive threat hunting, improve detection visibility through SIEM fine-tuning and engineering, and coordinate remediation activities with internal stakeholders. The role also requires leading incident bridge calls, driving remediation efforts, and ensuring timely closure of security incidents in alignment with organisational security policies and SLAs.\nStrong hands-on experience with Azure Cloud Security, including Microsoft Entra ID (Azure AD), Azure Defender for Cloud, Azure Security Centre, Conditional Access, RBAC, Managed Identities, and Azure Key Vault. Practical experience in SIEM/SOC operations, including Microsoft Sentinel, log analysis, incident investigation, threat hunting, security monitoring, alert triage, and incident response. Good understanding of Identity and Access Management (IAM) in cloud environments, including identity lifecycle management, MFA, Privileged Identity Management (PIM), Conditional Access Policies, and Zero Trust principles.\nThe candidate will have responsibilities across the following functions:\nSecurity Monitoring and Alert Investigation:\nMonitor and investigate security alerts, incidents, and security incidents from SIEM platforms and ticketing systems.\nAnalyse and triage Alerts, Incidents, and Security Incidents to determine legitimacy, severity, scope, and impact.\nCorrelate logs and events from multiple security tools including EDR, firewalls, IDS/IPS, cloud platforms, and endpoint systems.\nEscalate validated threats and critical incidents according to defined procedures.\nEnsure timely response and resolution within agreed SLAs.\nIncident Response (IR) and Security Incident Handling:\nExecute all stages of the Incident Response lifecycle: Preparation, Identification, Containment, Eradication, Recovery, Lessons Learned\nInvestigate and respond to cybersecurity incidents including malware infections, phishing attacks, unauthorised access, insider threats, and suspicious activities.\nPerform root cause analysis and determine attack vectors, impacted assets, and remediation actions.\nCoordinate containment and recovery activities with infrastructure, network, endpoint, and application teams.\nMaintain proper incident documentation, evidence collection, timelines, and response records.\nSupport post-incident review and improvement activities.\nSIEM Fine-Tuning and Security Engineering:\nFine-tune SIEM use cases, correlation rules, parsers, dashboards, and alerting mechanisms.\nReduce false positives and improve detection accuracy and operational efficiency.\nEnhance monitoring visibility by onboarding new log sources and improving telemetry coverage.\nIdentify monitoring gaps and recommend improvements to security controls and detection capabilities.\nSupport automation and security orchestration initiatives.\nThreat Hunting:\nConduct proactive threat hunting activities to identify advanced threats and hidden malicious behaviour.\nUtilise threat intelligence, IOC analysis, behavioural analytics, and MITRE ATT& CK techniques during investigations.\nDevelop and execute threat hunting hypotheses and detection queries.\nIdentify anomalous activities and improve detection logic based on findings.\nProvide recommendations to strengthen the organisation's security posture.\nStakeholder Coordination and Incident Management:\nDrive and lead incident bridge calls with internal and external stakeholders during active security incidents.\nCoordinate remediation and recovery activities with technical teams and business owners.\nProvide regular incident status updates, technical findings, and remediation recommendations.\nTrack remediation actions and ensure timely closure of security incidents.\nParticipate in operational and management reporting activities.\nDay-to-Day Activities:\nMonitor SIEM dashboards, alerts, and incident queues.\nInvestigate suspicious events and validate security alerts.\nRespond to and manage security incidents following IR processes.\nPerform log analysis, event correlation, and root cause analysis.\nFine-tune SIEM rules and improve detection visibility.\nConduct proactive threat hunting and IOC analysis.\nLead incident response and remediation coordination calls.\nCreate and maintain SOPs, playbooks, and operational documentation.\nUpdate tickets, incident records, and investigation reports.\nCollaborate with stakeholders to ensure timely remediation and recovery.\nRequirements:\nStrong hands-on experience with Azure Cloud Security, including Microsoft Entra ID (Azure AD), Azure Defender for Cloud, Azure Security Centre, Conditional Access, RBAC, Managed Identities, and Azure Key Vault.\nMandatory Skills: Azure Cloud Security, Microsoft Entra ID (Azure AD), Microsoft Sentinel (SIEM), SOC Operations, IAM, Incident Response, and excellent verbal and written communication skills. Candidates with only On-Premises Active Directory experience will not be considered.\nOperations, IAM, Incident Response, and excellent verbal and written communication skills.\nCandidates with only On-Premises Active Directory experience will not be considered.","description_format":"text","description_chars":5547,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-08-25T09:53:45Z"}],"visa":[],"liveness":{"score":5,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.392,"p_room":0.35,"age_days":52,"expected_fill_days":22,"reasons":["seen:52","win:tail"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/visionet-systems-soc-analyst","json_url":"https://alion.io/job/visionet-systems-soc-analyst.json","meta":{"generated_at":"2026-10-17T13:35:19Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18300,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3216},"rest":"https://alion.io/mcp/rest/get_company?id=3216"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvisionet-systems-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvisionet-systems-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvisionet-systems-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/visionet-systems-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvisionet-systems-soc-analyst"}]}