{"id":1966450,"url":"https://alion.io/job/zeiss-l3-soc-analyst","title":"L3 SOC Analyst","company":{"id":5290,"name":"Zeiss","domain":"zeiss.com","url":"https://alion.io/company/zeiss","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":229,"ghost_share":0,"stale_share":0.943,"repost_share":0,"time_to_fill_p50_days":27,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mexico"],"countries":["MX"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":43000,"max_usd":128000,"period":"year","method":null,"sample_n":4493},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cyber Kill Chain","optional":false},{"name":"DLP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-06T17:36:33Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-13T08:15:40Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"ZEISS is technology and innovation. Founded in Germany in 1846, we’re an internationally leading technology enterprise operating in the optics and optoelectronics industries generating more than 10.8 billion Euros in revenue with around 46,000 employees across 50 countries around the globe.\nAs a company wholly owned by a foundation, ZEISS is rooted in and committed to responsibility in all its activities. Therefore, 15% of revenue is currently invested in science and R&D. As the pioneer of scientific optics, we continue to challenge the limits of human imagination. With our passion for excellence we create value for our customers and inspire the world to see in new ways. We’re looking for a SOC Analyst to join us in Mexico City, Mexico.\nYour Role\nThe role of an SOC Analyst will involve:\nAs L3 SOC Internal Analyst, you lead the day-to-day operations of our Cyber Defense Center (CDC) and set the direction for effective monitoring, investigation, and incident response across all SOC tiers. You act as the primary interface to our Managed Security Service Provider (MSSP) and as the senior escalation point for our most complex and high-impact investigations.\nBeyond the operational lead role, you shape and steer our threat hunting activities, ensuring they are risk-driven, measurable, and firmly anchored in CDC governance. In close collaboration with engineering, CIRT, threat intelligence, and other capability functions, you drive the continuous evolution of our detection and response capabilities and help strengthen the organization's overall security posture.\nAct as the single point of contact for the MSSP conducting SOC 24/7 monitoring and manage vendor performance, outputs, and service assurance.\nServe as the L3 escalation point for complex alerts, incidents, and investigations, providing senior technical expertise and decision-making.\nCoordinate and lead response to incidents across SOC tiers and ensure effective handover to the CIRT for high and critical cases.\nOwn the SIEM/SOAR detection lifecycle, including log source onboarding, continuous fine-tuning of detection rules, and review/validation of use cases.\nDefine threat hunting objectives, aligning them with the CDC’s strategic goals and coordinate MSSP-led threat hunting activities.\nDevelop and produce monthly KPI dashboards and reporting to demonstrate SOC performance and drive improvements.\nWork with the engineering team to increase log coverage, telemetry quality, and overall visibility across the monitored environment.\nServe as Duty Operational Manager on a rotational on-call basis (24/7/365), providing senior operational oversight and incident support out of hours.\nYour Experience\nAs an SOC Analyst you will have:\nDegree in Computer Science, IT Security, or a related field, or equivalent work experience.\nSeveral years of experience in a Security Operations Center, incident response, or threat detection role, including senior/L3 responsibilities and team or vendor coordination.\nExcellent communication and stakeholder management skills, with the ability to translate technical findings for both technical and executive audiences.\nExperience in incident response, threat detection, or security monitoring, with expertise in detection and response workflows.\nStrong ability to work under pressure, prioritize critical incidents, make rapid decisions, and support on-call escalation.\nHands-on experience with SIEM, SOAR, and EDR technologies, as well as a solid understanding of detection technologies such as IDS/IPS, DLP, and WAF.\nUnderstanding of security threats and attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain.\nAbility and drive to review, manage and continously improve vendor performance, contracting and metrics with clear accountability and follow-through.\nExperience leading threat hunting activities, including defining hypotheses, objectives, and measurable outcomes.\nFamiliarity with EU cybersecurity regulations relevant to SOC operations (e.g., NIS2 Directive) is a plus.\nProfessional certifications such as CISM, GCIA, GCIH, or CISSP are a plus.\nFluency in English; German is a plus.\nYour ZEISS Recruiting Team:\nJoe Taroni","description_format":"text","description_chars":4165,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Artificial Intelligence","Manufacturing","Electronics Manufacturing"],"lifecycle":[{"event":"open","at":"2026-10-06T17:36:33Z"}],"visa":[],"liveness":{"score":60,"band":"ok","label":"Likely open","p_open":1,"p_active":0.604,"p_room":1,"age_days":6,"expected_fill_days":27,"reasons":["conf:1","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/zeiss-l3-soc-analyst","json_url":"https://alion.io/job/zeiss-l3-soc-analyst.json","meta":{"generated_at":"2026-10-13T12:28:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19382,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5290},"rest":"https://alion.io/mcp/rest/get_company?id=5290"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzeiss-l3-soc-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzeiss-l3-soc-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzeiss-l3-soc-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zeiss-l3-soc-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzeiss-l3-soc-analyst"}]}