{"id":3693704,"url":"https://alion.io/job/zensar-technologies-digital-security-soc-services-2","title":"DIGITAL SECURITY - SOC Services","company":{"id":59576,"name":"Zensar Technologies","domain":"zensar.com","url":"https://alion.io/company/zensar-technologies","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":91,"open_postings":70,"ghost_share":0.1,"stale_share":0.086,"repost_share":0.386,"time_to_fill_p50_days":6,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Anomaly Detection","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Crowdstrike","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"LogRhythm","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Trend Micro","optional":false},{"name":"Windows Server","optional":false},{"name":"Wireshark","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false}],"status":"live","first_seen_at":"2026-11-03T16:23:59Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-08T17:06:37Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"SOC Threat Hunting Analyst / Threat Hunter - Job Description\nJob Title: SOC Threat Hunting Analyst\nExperience: 4-8 Years (Senior Threat Hunter: 8-12 Years)\nLocation: Hybrid / Remote / Onsite\nDepartment: Cyber Security Operations Center (SOC)\nRole Summary\nWe are seeking an experienced Threat Hunting Analyst to proactively identify, investigate, and mitigate advanced cyber threats across enterprise environments. The ideal candidate will possess expertise in threat hunting, incident response, SIEM, EDR/XDR technologies, threat intelligence, and malware analysis. This role will work closely with SOC, Incident Response, Cloud Security, Infrastructure, and Security Engineering teams to strengthen organizational cyber resilience.\nKey Responsibilities\nThreat Hunting & Detection\nConduct proactive threat hunting across endpoints, networks, cloud platforms, and identity systems.\nIdentify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and suspicious behaviors.\nDevelop hunting hypotheses based on threat intelligence and emerging attack trends.\nDetect Advanced Persistent Threats (APTs), ransomware, insider threats, and lateral movement activities.\nLeverage MITRE ATT&CK framework for adversary mapping and detection improvement.\nSecurity Monitoring & Investigation\nAnalyze logs, network traffic, endpoint telemetry, and cloud events.\nInvestigate suspicious security activities escalated from SOC L1/L2 teams.\nPerform root cause analysis and validate security incidents.\nCorrelate data from multiple security platforms.\nDetection Engineering\nCreate and optimize SIEM detection rules and use cases.\nDevelop behavioral analytics and anomaly detection strategies.\nReduce false positives through continuous tuning.\nImprove SOC detection coverage and security monitoring effectiveness.\nThreat Intelligence\nConsume commercial and open-source threat intelligence feeds.\nTrack threat actors, attack campaigns, and emerging vulnerabilities.\nIntegrate threat intelligence into hunting and detection processes.\nDevelop threat profiles and risk assessments.\nIncident Response Support\nSupport containment, eradication, and recovery efforts during security incidents.\nConduct forensic investigations and evidence collection.\nAssist in ransomware and cyber breach investigations.\nSupport post-incident reviews and lessons learned activities.\nReporting & Leadership\nPrepare executive-level threat hunting reports.\nPresent findings and recommendations to security leadership.\nMentor junior SOC analysts.\nContribute to SOC maturity and continuous improvement initiatives.\nRequired Technical Skills\nSecurity Platforms\nMicrosoft Sentinel\nSplunk\nIBM QRadar\nArcSight\nLogRhythm\nEDR/XDR Solutions\nMicrosoft Defender XDR\nCrowdStrike Falcon\nSentinelOne\nPalo Alto Cortex XDR\nTrend Micro Vision One\nCloud Security\nMicrosoft Azure Security\nMicrosoft Defender for Cloud\nAWS Security Services\nGoogle Cloud Security\nNetwork Security\nFirewalls\nIDS/IPS\nProxy Security\nDNS Analysis\nPacket Analysis (Wireshark)\nThreat Hunting Tools\nKQL (Kusto Query Language)\nPowerShell\nPython\nSigma Rules\nYARA Rules\nIdentity Security\nMicrosoft Entra ID\nActive Directory\nPIM/PAM\nMFA & Conditional Access\nOperating Systems\nWindows Server\nLinux\nMacOS\nMicrosoft Security Stack Expertise (Preferred)\nMicrosoft Sentinel\nMicrosoft Defender for Endpoint\nMicrosoft Defender for Identity\nMicrosoft Defender for Office 365\nDefender for Cloud Apps\nMicrosoft Entra ID\nDefender XDR\nPurview DLP\nAzure Security Center\nLogic Apps & SOAR Automation\nQualifications\nBachelor's degree in Computer Science, Information Security, Cybersecurity, or related field.\n4-8 years of SOC, Threat Hunting, Incident Response, or Security Operations experience.\nStrong understanding of MITRE ATT&CK framework.\nHands-on experience in threat hunting and advanced investigations.\nExperience in enterprise and cloud environments.\nPreferred Certifications\nMicrosoft\nSC-200: Security Operations Analyst\nSC-100: Cybersecurity Architect\nAZ-500: Azure Security Engineer\nIndustry Certifications\nGCFA\nGCIH\nGCTI\nCISSP\nCEH\nCompTIA Security+\nKey Competencies\nAdvanced Threat Hunting\nIncident Response\nThreat Intelligence Analysis\nSecurity Analytics\nDetection Engineering\nLog Analysis\nMalware Investigation\nCyber Forensics\nAutomation & SOAR\nExecutive Reporting\nProblem Solving\nStakeholder Management\nSenior Threat Hunter (8-12 Years) - Additional Expectations\nLead enterprise-wide threat hunting programs.\nBuild custom detection content and hunting playbooks.\nDevelop SOC threat hunting strategy and roadmap.\nLead purple-team and adversary simulation exercises.\nMentor SOC L1/L2/L3 analysts.\nDrive automation through SOAR and AI-powered security analytics.\nPresent threat landscape and risk assessments to CISO-level leadership.\nIdeal Candidate Profile\nA strong candidate should have hands-on experience with Microsoft Sentinel, Defender XDR, KQL, MITRE ATT&CK, Threat Intelligence, EDR/XDR platforms, ransomware investigations, cloud security, and advanced threat hunting across hybrid enterprise environments. This profile is highly sought after by global MSSP, banking, healthcare, and enterprise SOC organizations.\nSOC Threat Hunting Analyst / Threat Hunter - Job Description\nJob Title: SOC Threat Hunting Analyst\nExperience: 4-8 Years (Senior Threat Hunter: 8-12 Years)\nLocation: Hybrid / Remote / Onsite\nDepartment: Cyber Security Operations Center (SOC)\nRole Summary\nWe are seeking an experienced Threat Hunting Analyst to proactively identify, investigate, and mitigate advanced cyber threats across enterprise environments. The ideal candidate will possess expertise in threat hunting, incident response, SIEM, EDR/XDR technologies, threat intelligence, and malware analysis. This role will work closely with SOC, Incident Response, Cloud Security, Infrastructure, and Security Engineering teams to strengthen organizational cyber resilience.\nKey Responsibilities\nThreat Hunting & Detection\nConduct proactive threat hunting across endpoints, networks, cloud platforms, and identity systems.\nIdentify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and suspicious behaviors.\nDevelop hunting hypotheses based on threat intelligence and emerging attack trends.\nDetect Advanced Persistent Threats (APTs), ransomware, insider threats, and lateral movement activities.\nLeverage MITRE ATT&CK framework for adversary mapping and detection improvement.\nSecurity Monitoring & Investigation\nAnalyze logs, network traffic, endpoint telemetry, and cloud events.\nInvestigate suspicious security activities escalated from SOC L1/L2 teams.\nPerform root cause analysis and validate security incidents.\nCorrelate data from multiple security platforms.\nDetection Engineering\nCreate and optimize SIEM detection rules and use cases.\nDevelop behavioral analytics and anomaly detection strategies.\nReduce false positives through continuous tuning.\nImprove SOC detection coverage and security monitoring effectiveness.\nThreat Intelligence\nConsume commercial and open-source threat intelligence feeds.\nTrack threat actors, attack campaigns, and emerging vulnerabilities.\nIntegrate threat intelligence into hunting and detection processes.\nDevelop threat profiles and risk assessments.\nIncident Response Support\nSupport containment, eradication, and recovery efforts during security incidents.\nConduct forensic investigations and evidence collection.\nAssist in ransomware and cyber breach investigations.\nSupport post-incident reviews and lessons learned activities.\nReporting & Leadership\nPrepare executive-level threat hunting reports.\nPresent findings and recommendations to security leadership.\nMentor junior SOC analysts.\nContribute to SOC maturity and continuous improvement initiatives.\nRequired Technical Skills\nSecurity Platforms\nMicrosoft Sentinel\nSplunk\nIBM QRadar\nArcSight\nLogRhythm\nEDR/XDR Solutions\nMicrosoft Defender XDR\nCrowdStrike Falcon\nSentinelOne\nPalo Alto Cortex XDR\nTrend Micro Vision One\nCloud Security\nMicrosoft Azure Security\nMicrosoft Defender for Cloud\nAWS Security Services\nGoogle Cloud Security\nNetwork Security\nFirewalls\nIDS/IPS\nProxy Security\nDNS Analysis\nPacket Analysis (Wireshark)\nThreat Hunting Tools\nKQL (Kusto Query Language)\nPowerShell\nPython\nSigma Rules\nYARA Rules\nIdentity Security\nMicrosoft Entra ID\nActive Directory\nPIM/PAM\nMFA & Conditional Access\nOperating Systems\nWindows Server\nLinux\nMacOS\nMicrosoft Security Stack Expertise (Preferred)\nMicrosoft Sentinel\nMicrosoft Defender for Endpoint\nMicrosoft Defender for Identity\nMicrosoft Defender for Office 365\nDefender for Cloud Apps\nMicrosoft Entra ID\nDefender XDR\nPurview DLP\nAzure Security Center\nLogic Apps & SOAR Automation\nQualifications\nBachelor's degree in Computer Science, Information Security, Cybersecurity, or related field.\n4-8 years of SOC, Threat Hunting, Incident Response, or Security Operations experience.\nStrong understanding of MITRE ATT&CK framework.\nHands-on experience in threat hunting and advanced investigations.\nExperience in enterprise and cloud environments.\nPreferred Certifications\nMicrosoft\nSC-200: Security Operations Analyst\nSC-100: Cybersecurity Architect\nAZ-500: Azure Security Engineer\nIndustry Certifications\nGCFA\nGCIH\nGCTI\nCISSP\nCEH\nCompTIA Security+\nKey Competencies\nAdvanced Threat Hunting\nIncident Response\nThreat Intelligence Analysis\nSecurity Analytics\nDetection Engineering\nLog Analysis\nMalware Investigation\nCyber Forensics\nAutomation & SOAR\nExecutive Reporting\nProblem Solving\nStakeholder Management\nSenior Threat Hunter (8-12 Years) - Additional Expectations\nLead enterprise-wide threat hunting programs.\nBuild custom detection content and hunting playbooks.\nDevelop SOC threat hunting strategy and roadmap.\nLead purple-team and adversary simulation exercises.\nMentor SOC L1/L2/L3 analysts.\nDrive automation through SOAR and AI-powered security analytics.\nPresent threat landscape and risk assessments to CISO-level leadership.\nIdeal Candidate Profile\nA strong candidate should have hands-on experience with Microsoft Sentinel, Defender XDR, KQL, MITRE ATT&CK, Threat Intelligence, EDR/XDR platforms, ransomware investigations, cloud security, and advanced threat hunting across hybrid enterprise environments. This profile is highly sought after by global MSSP, banking, healthcare, and enterprise SOC organizations.\nSOC Threat Hunting Analyst / Threat Hunter - Job Description\nJob Title: SOC Threat Hunting Analyst\nExperience: 4-8 Years (Senior Threat Hunter: 8-12 Years)\nLocation: Hybrid / Remote / Onsite\nDepartment: Cyber Security Operations Center (SOC)\nRole Summary\nWe are seeking an experienced Threat Hunting Analyst to proactively identify, investigate, and mitigate advanced cyber threats across enterprise environments. The ideal candidate will possess expertise in threat hunting, incident response, SIEM, EDR/XDR technologies, threat intelligence, and malware analysis. This role will work closely with SOC, Incident Response, Cloud Security, Infrastructure, and Security Engineering teams to strengthen organizational cyber resilience.\nKey Responsibilities\nThreat Hunting & Detection\nConduct proactive threat hunting across endpoints, networks, cloud platforms, and identity systems.\nIdentify Indicators of Compromise (IOCs), Indicators of Attack (IOAs), and suspicious behaviors.\nDevelop hunting hypotheses based on threat intelligence and emerging attack trends.\nDetect Advanced Persistent Threats (APTs), ransomware, insider threats, and lateral movement activities.\nLeverage MITRE ATT&CK framework for adversary mapping and detection improvement.\nSecurity Monitoring & Investigation\nAnalyze logs, network traffic, endpoint telemetry, and cloud events.\nInvestigate suspicious security activities escalated from SOC L1/L2 teams.\nPerform root cause analysis and validate security incidents.\nCorrelate data from multiple security platforms.\nDetection Engineering\nCreate and optimize SIEM detection rules and use cases.\nDevelop behavioral analytics and anomaly detection strategies.\nReduce false positives through continuous tuning....","description_format":"text","description_chars":15407,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-03T17:28:03Z"}],"visa":[],"liveness":{"score":66,"band":"ok","label":"Likely open","p_open":1,"p_active":0.881,"p_room":0.75,"age_days":4,"expected_fill_days":6,"reasons":["conf:3","velocity","win:late","comp:brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":null,"html_url":"https://alion.io/job/zensar-technologies-digital-security-soc-services-2","json_url":"https://alion.io/job/zensar-technologies-digital-security-soc-services-2.json","meta":{"generated_at":"2026-11-08T17:15:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36270,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59576},"rest":"https://alion.io/mcp/rest/get_company?id=59576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzensar-technologies-digital-security-soc-services-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzensar-technologies-digital-security-soc-services-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzensar-technologies-digital-security-soc-services-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zensar-technologies-digital-security-soc-services-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzensar-technologies-digital-security-soc-services-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3693704}},{"tool":"search_jobs","arguments":{"company":"zensar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3693704},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}