SOC Analyst - Senior Consultant

At Allstate, great things happen when our people work together to protect families and their belongings from life’s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers’ evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection. 

• →Monitor, analyse, and investigate security alerts generated from SIEM, EDR/XDR, Email Security, Cloud Security, and other security platforms.
• →Lead and coordinate cybersecurity incident response activities for medium to high severity incidents.
• →Collaborate with internal stakeholders, technical teams, and external partners to drive incident resolution and remediation efforts
• →Document investigation findings, timelines, lessons learned, and response activities in accordance with established processes and procedures.
• →Communicate incident status, risks, and recommendations to leadership and relevant stakeholders.
• →Participate in threat hunting, proactive detection improvement initiatives, and continuous enhancement of incident response capabilities.
• →Support after-hours incident response activities and rotational on-call responsibilities as required in weekends.

• Experience serving as an Incident Commander or lead investigator during cybersecurity incidents.
• Strong understanding of incident response methodologies, security operations processes, and cyber kill chain concepts.
• Experience with EDR/XDR solutions such as Microsoft Defender for Endpoint, CrowdStrike Falcon, or similar technologies.
• Strong knowledge of network technologies including TCP/IP, DNS, HTTP/S, VPN, Firewalls, IDS/IPS, and network traffic analysis.
• Hands-on experience analysing logs and security events from Azure, AWS, Microsoft 365, or other cloud platforms.
• Knowledge of leveraging AI-assisted security operations, including threat detection, investigation acceleration, alert triage, automation, and operational efficiency improvements within a Security Operations Center (SOC).
• Basic understanding of AI/Generative AI security risks, including prompt injection, data leakage, unauthorized model access, and misuse of AI applications within enterprise environments.
• Excellent written and verbal communication skills with the ability to engage technical and non-technical stakeholders.

• Minimum 8 years of overall IT/Cybersecurity experience with at least 5-6 years in Security Operations, Incident Response, or Threat Detection roles.
• Preferred certifications include GCIH, GSEC, GISF, CEH, CompTIA Security+, SC-200, or equivalent cybersecurity certifications.

The Allstate Corporation is one of the largest publicly held insurance providers in the United States. Ranked No. 84 in the 2023 Fortune 500 list of the largest United States corporations by total revenue, The Allstate Corporation owns and operates 18 companies in the United States, Canada, Northern Ireland, and India. Allstate India Private Limited, also known as Allstate India, is a subsidiary of The Allstate Corporation. The India talent center was set up in 2012 and operates under the corporation's Good Hands promise. As it innovates operations and technology, Allstate India has evolved beyond its technology functions to be the critical strategic business services arm of the corporation. With offices in Bengaluru and Pune, the company offers expertise to the parent organization’s business areas including technology and innovation, accounting and imaging services, policy administration, transformation solution design and support services, transformation of property liability service design, global operations and integration, and training and transition.

Learn more about Allstate India here.