SOC Analyst - Senior Consultant
Allstate (company site, opens in a new tab)8+ yrsHybridDirect career pageEst. 20–35 LPA
Posted on 11 Sept
Reach people at Allstate
People at this company you can reach
Log in to see who works here
Create a free account or log in to see the people at Allstate you could write to:
- Recruiters & HR
- People in this function
- Work addresses
Your match
Against your primary resume
Log in to see your match score
Create a free account or log in to unlock your CV match score across:
- Role fit
- Experience
- Industry relevance
Protocol Intelligence
How competitive this role is
Competition
Background fit
Strictness
Log in to see why each signal reads the way it does.
Job description
Structured overview of role & requirements
About This Role
- Lead and coordinate incident response activities for medium to high severity cybersecurity incidents across on-premises, cloud, and affiliated environments.
- Monitor, analyze, and investigate security alerts from SIEM, EDR/XDR, Email Security, Cloud Security, and other platforms to mitigate cyber risks.
- Document and communicate investigation findings, risks, and remediation efforts to leadership and stakeholders, including participation in threat hunting and continuous improvement initiatives.
Minimum Requirements
- Minimum 8 years of overall IT/Cybersecurity experience with at least 5-6 years in Security Operations, Incident Response, or Threat Detection roles.
- Experience serving as Incident Commander or lead investigator during cybersecurity incidents is required.
- Hands-on experience with EDR/XDR solutions (e.g., Microsoft Defender for Endpoint, CrowdStrike Falcon) and cloud platforms (Azure, AWS, Microsoft 365) for log and event analysis.
- Not explicitly mentioned in the JD: mandatory educational qualifications or strict location requirements.
Ideal Candidate Profile
- Proven ability to lead and coordinate incident response for complex and high severity cybersecurity incidents.
- Strong technical expertise covering SIEM, EDR/XDR, network technologies (TCP/IP, DNS, Firewalls, IDS/IPS), and cloud security environments.
- Experience leveraging AI-assisted security operations and understanding of AI/Generative AI security risks to enhance SOC operational efficiency.