SOC Analyst - Sr Consultant

Job Summary

At Allstate, great things happen when our people work together to protect families and their belongings from life s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.

Job Description

The Allstate Cybersecurity Controls (ACC) Threat Detection and Response team is responsible for detecting, investigating, responding to, and remediating cybersecurity incidents across on-premises, cloud, and affiliated environments. The Incident Management Senior Consultant II plays a key role in leading incident investigations, coordinating response activities, and minimizing cyber risk through effective threat detection and incident management.

Primary Responsibilities

• Monitor, analyse, and investigate security alerts generated from SIEM, EDR/XDR, Email Security, Cloud Security, and other security platforms.
• Lead and coordinate cybersecurity incident response activities for medium to high severity incidents.
• Collaborate with internal stakeholders, technical teams, and external partners to drive incident resolution and remediation efforts
• Document investigation findings, timelines, lessons learned, and response activities in accordance with established processes and procedures.
• Communicate incident status, risks, and recommendations to leadership and relevant stakeholders.
• Participate in threat hunting, proactive detection improvement initiatives, and continuous enhancement of incident response capabilities.
• Support after-hours incident response activities and rotational on-call responsibilities as required in weekends.

Primary Skills Criteria

• Experience serving as an Incident Commander or lead investigator during cybersecurity incidents.
• Strong understanding of incident response methodologies, security operations processes, and cyber kill chain concepts.
• Experience with EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, or similar technologies.
• Strong knowledge of network technologies including TCP/IP, DNS, HTTP/S, VPN, Firewalls, IDS/IPS, and network traffic analysis.
• Hands-on experience analysing logs and security events from Azure, AWS, Microsoft 365, or other cloud platforms.
• Knowledge of leveraging AI-assisted security operations, including threat detection, investigation acceleration, alert triage, automation, and operational efficiency improvements within a Security Operations Center (SOC).
• Basic understanding of AI/Generative AI security risks, including prompt injection, data leakage, unauthorized model access, and misuse of AI applications within enterprise environments.
• Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.

Experience Certifications

• Minimum 8 years of overall IT/Cybersecurity experience with at least 5-6 years in Security Operations, Incident Response, or Threat Detection roles.
• Preferred certifications include GCIH, GSEC, GISF, CEH, CompTIA Security+, SC-200, or equivalent cybersecurity certifications.

Primary Skills

• Customer Centricity
• Digital Literacy
• Inclusive Leadership
• Learning Agility
• Results-Oriented

Recruiter Info

Yateesh B G

Disclaimer: This job posting & Location has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.