{"id":1024424,"url":"https://alion.io/job/wrike-mid-soc-analyst","title":"Mid SOC Analyst","company":{"id":784,"name":"Wrike","domain":"wrike.com","url":"https://alion.io/company/wrike","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":73,"open_postings":45,"ghost_share":0.356,"stale_share":0,"repost_share":0.044,"time_to_fill_p50_days":72,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":5000000,"max":null,"currency":"INR","period":"month","gross":null,"usd_annual":633960},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"GCP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Okta","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Wazuh","optional":false},{"name":"Wrike","optional":false}],"status":"live","first_seen_at":"2025-05-27T18:08:52Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-11-08T16:39:44Z","board_verified":true,"closed_at":null,"days_open":530,"trust":{"level":"ghost","repost_count":2,"flags":["stale","repost","company_stale"],"days_open":529},"description":"Wrike is the most powerful work management platform. Built for teams and organizations looking to collaborate, create, and exceed every day, Wrike brings everyone and all work into a single place to remove complexity, increase productivity, and free people up to focus on their most purposeful work.\nWrike is our people, not a place. As a distributed team, we own our growth, stay globally connected, and rely on the product we build to deliver impactful work alongside brilliant minds. You'll have real ownership over meaningful work, a global team that has your back, and the flexibility to do your best work your way. If that sounds like you, we'd love to hear from you.\nOur vision: A world where everyone is free to focus on their most purposeful work, together. \nAbout the Role:\nWith flexible, distributed-first ways of working, you'll have the support to do your best work, wherever you are. Wrike commits to its customers that their data is monitored around the clock. Our Security Operations Center delivers on that promise through a hybrid model with a 24/7 managed detection partner (Rapid7)-and our analysts are the core drivers who handle escalations, conduct deep-dive investigations, and execute immediate action.\nAs an L2 SOC Analyst, you will play a pivotal role in our security rotation: monitoring and triaging security alerts, responding to escalations from our MDR partner, investigating incidents end-to-end, and continuously maturing our detection capabilities to protect Wrike and our customers.\nYour Impact:\n Alert Triage & Escalation: Monitor, triage, and investigate security alerts and events, including direct escalations from our 24/7 MDR partner (Rapid7).\n Incident Containment & Forensics: Assess risk and impact of potential incidents, conducting end-to-end investigations (log analysis, endpoint forensics, scoping) and taking swift remediation actions.\nOn-Call Coverage: Participate in the SOC on-call rotation to guarantee round-the-clock escalation coverage.\nDetection Engineering & Tuning: Continuously refine and tune detection rules to minimize false positives and identify genuine threats faster.\nProactive Threat Hunting: Contribute to threat hunting initiatives across endpoints, identity providers, SaaS platforms, and cloud environments.\nProcess Improvement: Help document, refine, and optimize SOC playbooks, runbooks, incident reports, and operational escalation workflows.\nYour Qualifications:\n Experience: 2-3+ years of hands-on experience in a SOC or security monitoring environment (alert triage, incident investigation, and response).\n Technical Proficiency: Hands-on experience with SIEM platforms (Rapid7 InsightIDR or similar) and EDR/antimalware tooling for endpoint investigations.\n Core Knowledge: Strong understanding of network security fundamentals, common threat vectors, and attack frameworks (MITRE ATT&CK).\nProblem-Solving & Communication: Sharp logical thinking and analytical skills paired with advanced written and verbal English communication abilities.\nAvailability: Ability and willingness to participate in an on-call rotation, including occasional nights and weekends.\nStandout Qualities:\nHybrid Model Experience: Prior experience collaborating directly with an MDR or MSSP partner in a hybrid SOC environment.\nExtended Tooling Expertise: Hands-on familiarity with tools such as Splunk, Wazuh, Microsoft Defender for Endpoint, Crowdtrike, Okta, Google Workspace, AWS, or GCP.\nAdvanced Capabilities: Previous experience in active threat hunting, detection engineering, or task automation using Python/Bash.\n Industry Certifications: Relevant security certifications (e.g., Security+, CySA+, GCIH, GCDA, or vendor-specific certifications).\nTeam Dynamics:\nYou will join a highly collaborative, vigilant, and supportive Security Operations Center team. In this role, you will work closely with internal incident responders, cross-functional IT and infrastructure teams, and directly alongside analysts from our 24/7 MDR partner (Rapid7). The team culture values transparent communication, continuous learning, and collective ownership of security outcomes.\nOur Work Style:\nWe operate in a dynamic, hybrid security model utilizing modern cloud-first security tooling.\nTech Stack & Tools: Rapid7 InsightIDR, EDR/XDR platforms, Okta, Google Workspace, AWS/GCP, and custom Python/Bash automation scripts.\nMethodologies: Framework-driven incident response aligned with MITRE ATT&CK, structured playbooks, and continuous threat-hunting cycles.\nWhat Makes Us Different: Unlike traditional SOC environments burdened by endless repetitive alerts, our hybrid model leverages an MDR partner to offload initial noise. This allows our L2 Analysts to focus on complex investigations, high-impact threat hunting, and genuine detection engineering.\nBenefits & Perks:\n18 calendar days of paid vacation\n12 days of National & Festival holidays (10 fixed, 2 flexible)\nSick Leave Compensation (5 Paid Uncertified Sick Days)\nMenstrual Leave: Twelve (12) days per calendar year. Women employees are eligible for up to 1 day of menstrual leave per month.\nParental Leave: 26 Weeks Maternity / 4 Week Paternity \n2 Volunteer Days\nGroup Medical Insurance (Employees + Dependents)\nTerm Life Insurance (Rs 50,00,000)\nPersonal Accident Insurance (Rs 50,00,000)\nMonthly Broadband / Internet Reimbursement (INR 1500)\nHybrid Working Model + Complimentary Lunch & Snacks\nYour recruitment buddy will be Nandini Singh, Recruiter.\nWho Is Wrike and Our Culture\nWe’re a team of innovators and creators who solve the complex work problems of today and tomorrow.\nHybrid work mode\nWrike is our people, not a place. With 1,000+ employees collaborating across nearly every time zone, we support talent through 10 global hubs - Australia, Costa Rica, Cyprus, Czechia, Estonia, France, India, Ireland, Japan, and the United States - offering flexible ways of working that include remote work, hybrid environments, and co-working spaces across many locations.\nWhile flexibility looks different across teams and regions, employees located near certain hubs - particularly in Prague (CZ), Nicosia (CY), Bangalore (IN), and Rennes (FR) - are generally expected to collaborate in person around 2-3 days per week, balancing the flexibility of distributed work with opportunities for in-person collaboration and connection.\nOur persona \n Smart: We love what we do, and we’re great at it because this is our domain. Our combined knowledge in this space is unmatched.\n Dedicated: We get up every day focused on helping our customers win. We’re committed to helping our teammates win, too!\n Approachable: We're friendly, easy to get along with, considerate, and helpful. \nOur culture and Values \nCustomer-Focused\nWe care about our customers. We understand the customer journey, experience, and value derived from Wrike. Decision-making and action-taking are done with the customer in mind.\nCollaborative\nWe work as one and win together, each bringing unique strengths that contribute to diversity of thought for better outcomes. Leveraging our own work management platform, we foster an environment of creative collaboration and shared achievement.\nCreative\nWe strive to succeed through continuous innovation. It’s our pursuit of novel concepts that helped us create a market category. We continue to cultivate a workplace that fosters creative thinking as a means of transcending conventional boundaries and empowers us to break new ground to deliver extraordinary work management solutions. \nCommitted\nWe believe in ownership at all levels of the organization, by owning workflows from start to finish. Each member of our team is an integral part of this commitment, establishing work as a platform for personal growth and transformation, as well as collective success and growth.\nCheck out our LinkedIn Life Page, Company culture page, Instagram, Wrike Engineering Team, Medium, Meetup.com, Youtube for a feel for what life is like at Wrike.","description_format":"text","description_chars":7955,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":["Continuous learning","Health insurance","Hybrid work","Internet reimbursement","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"},{"name":"India","iso":"IN","kind":"country"},{"name":"Japan","iso":"JP","kind":"country"},{"name":"France","iso":"FR","kind":"country"},{"name":"Australia","iso":"AU","kind":"country"},{"name":"Cyprus","iso":"CY","kind":"country"},{"name":"Czech Republic","iso":"CZ","kind":"country"},{"name":"Ireland","iso":"IE","kind":"country"},{"name":"Costa Rica","iso":"CR","kind":"country"},{"name":"Estonia","iso":"EE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Project & Work Management Software"],"lifecycle":[{"event":"open","at":"2026-09-18T09:54:11Z"},{"event":"close","at":"2026-09-24T12:09:00Z"},{"event":"reopen","at":"2026-09-24T16:35:54Z"},{"event":"close","at":"2026-10-05T10:41:09Z"},{"event":"reopen","at":"2026-10-08T06:42:20Z"},{"event":"close","at":"2026-10-08T09:34:17Z"},{"event":"reopen","at":"2026-10-14T10:11:12Z"}],"visa":[],"liveness":{"score":3,"band":"cold","label":"Long shot","p_open":1,"p_active":0.114,"p_room":0.28,"age_days":529,"expected_fill_days":72,"reasons":["conf:1","repost:2","velocity","ghost","win:tail","crowd:junior"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":633960,"is_top_pay":true},"html_url":"https://alion.io/job/wrike-mid-soc-analyst","json_url":"https://alion.io/job/wrike-mid-soc-analyst.json","meta":{"generated_at":"2026-11-08T19:20:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":40379,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":784},"rest":"https://alion.io/mcp/rest/get_company?id=784"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fwrike-mid-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fwrike-mid-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fwrike-mid-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/wrike-mid-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fwrike-mid-soc-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1024424}},{"tool":"search_jobs","arguments":{"company":"wrike.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1024424},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}