{"id":3665610,"url":"https://alion.io/job/zensar-technologies-soc-analyst-l1-5-2","title":"SOC Analyst (L1.5)","company":{"id":59576,"name":"Zensar Technologies","domain":"zensar.com","url":"https://alion.io/company/zensar-technologies","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"A","score":93,"open_postings":53,"ghost_share":0.075,"stale_share":0.094,"repost_share":0.358,"time_to_fill_p50_days":6,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"DHCP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"IBM QRadar","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-03T05:43:25Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T10:57:03Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job SummaryWe are looking for a SOC Analyst (L1.5) with hands-on experience in Security Operations, Security Monitoring, Incident Response, Threat Hunting, and SIEM technologies. The ideal candidate should have exposure to Logpoint SIEM and strong experience in handling security incidents, alert triage, and threat investigations in a 24x7 SOC environment.\nCandidates with strong experience in Microsoft Sentinel, Splunk, QRadar, or ArcSight along with incident response and threat hunting capabilities will also be considered.\n Key ResponsibilitiesSecurity Monitoring & Incident DetectionMonitor and analyze security alerts generated from SIEM and integrated security tools.\nPerform real-time alert triage and validate security incidents.\nInvestigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.\nEscalate incidents to L2/L3 teams as per defined processes.\nEnsure adherence to incident response SLAs and SOC procedures.\nIncident Response & InvestigationPerform incident investigation and root cause analysis.\nAnalyze logs from:Windows Servers & Workstations\nLinux Systems\nActive Directory\nFirewalls\nIDS/IPS\nEDR/XDR Solutions\nProxy & Email Security Platforms\nCloud Platforms (Azure, AWS, GCP)\n\nSupport containment, eradication, recovery, and remediation activities.\nDocument incidents, findings, and recommendations.\nThreat Hunting & Threat IntelligencePerform proactive threat hunting activities.\nUtilize MITRE ATT&CK Framework for threat mapping and analysis.\nAnalyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).\nCorrelate threat intelligence with internal security events.\nIdentify suspicious user and system behavior.\nSIEM OperationsMonitor and manage Logpoint SIEM use cases and alerts.\nSupport correlation rule tuning and alert optimization.\nCreate and maintain dashboards, reports, and custom searches.\nValidate log ingestion and monitor SIEM health.\nReduce false positives through continuous tuning activities.\n Required Technical SkillsSIEM TechnologiesLogpoint SIEM (Preferred)\nMicrosoft Sentinel\nSplunk\nIBM QRadar\nArcSight\nSecurity TechnologiesMicrosoft Defender\nCrowdStrike\nSentinelOne\nPalo Alto\nFortinet\nCheck Point\nCisco Security Solutions\nIDS/IPS\nEmail Security Solutions\nThreat & Security OperationsSecurity Monitoring\nIncident Response\nAlert Triage\nIncident Investigation\nThreat Hunting\nThreat Intelligence\nMalware Analysis\nPhishing Investigation\nEvent Correlation\nRoot Cause Analysis\nOperating Systems & NetworkingWindows Administration\nLinux Administration\nTCP/IP\nDNS\nDHCP\nVPN\nHTTP/HTTPS\nSMTP\nNetwork Security Concepts\nSecurity FrameworksMITRE ATT&CK\nCyber Kill Chain\nNIST Incident Response Lifecycle\nThreat Intelligence Concepts\n QualificationsBachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.\n3+ years of SOC Operations experience.\nExperience working in a 24x7 SOC environment.\nStrong analytical and troubleshooting skills.\nGood verbal and written communication skills.\n Preferred CertificationsSC-200 (Microsoft Security Operations Analyst)\nCEH\nCompTIA Security+\nLogpoint Certified Analyst\nSplunk Certifications\n Ideal Candidate3-6 years of SOC experience.\nHands-on exposure to Logpoint SIEM is highly desirable.\nStrong experience with Microsoft Sentinel, Splunk, QRadar, or ArcSight.\nExperience in Incident Response, Alert Triage, Threat Hunting, Security Monitoring, and Threat Intelligence.\nExposure to CrowdStrike, Defender, SentinelOne, Palo Alto, or Fortinet.\nWillingness to work from Hyderabad in 24x7 rotational shifts.\n Key Responsibilities\nSecurity Monitoring & Incident Detection\nMonitor and analyze security alerts generated from SIEM and integrated security tools.\nPerform real-time alert triage and validate security incidents.\nInvestigate incidents related to malware, phishing, ransomware, insider threats, account compromise, privilege misuse, and unauthorized access.\nEscalate incidents to L2/L3 teams as per defined processes.\nEnsure adherence to incident response SLAs and SOC procedures.\nIncident Response & Investigation\nPerform incident investigation and root cause analysis.\nAnalyze logs from:Windows Servers & Workstations\nLinux Systems\nActive Directory\nFirewalls\nIDS/IPS\nEDR/XDR Solutions\nProxy & Email Security Platforms\nCloud Platforms (Azure, AWS, GCP)\n\nSupport containment, eradication, recovery, and remediation activities.\nDocument incidents, findings, and recommendations.\nThreat Hunting & Threat Intelligence\nPerform proactive threat hunting activities.\nUtilize MITRE ATT&CK Framework for threat mapping and analysis.\nAnalyze Indicators of Compromise (IOC) and Indicators of Attack (IOA).\nCorrelate threat intelligence with internal security events.\nIdentify suspicious user and system behavior.\nSIEM Operations\nMonitor and manage Logpoint SIEM use cases and alerts.\nSupport correlation rule tuning and alert optimization.\nCreate and maintain dashboards, reports, and custom searches.\nValidate log ingestion and monitor SIEM health.\nReduce false positives through continuous tuning activities.\n Qualifications\nBachelor's Degree in Computer Science, Information Technology, Cyber Security, or related field.\n3+ years of SOC Operations experience.\nExperience working in a 24x7 SOC environment.\nStrong analytical and troubleshooting skills.\nGood verbal and written communication skills.\nPreferred Certifications\nSC-200 (Microsoft Security Operations Analyst)\nCEH\nCompTIA Security+\nLogpoint Certified Analyst\nSplunk Certifications","description_format":"text","description_chars":5534,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams"],"lifecycle":[{"event":"open","at":"2026-11-03T06:11:20Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":6,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/zensar-technologies-soc-analyst-l1-5-2","json_url":"https://alion.io/job/zensar-technologies-soc-analyst-l1-5-2.json","meta":{"generated_at":"2026-11-04T15:58:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24429,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":59576},"rest":"https://alion.io/mcp/rest/get_company?id=59576"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fzensar-technologies-soc-analyst-l1-5-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fzensar-technologies-soc-analyst-l1-5-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fzensar-technologies-soc-analyst-l1-5-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/zensar-technologies-soc-analyst-l1-5-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fzensar-technologies-soc-analyst-l1-5-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3665610}},{"tool":"search_jobs","arguments":{"company":"zensar.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3665610},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}