- Monitor security alerts from SIEM and security devices, and perform triage to identify potential security incidents.
- Provide guidance and support to L1 analysts and ensure that tickets / alerts are handled effectively.
- Participate in the development and implementation of standard operating procedures and protocols for SOC operations and tools.
- Collaborate with the internal and external stakeholders to close security tickets / remediate identified security incidents.
- Provide technical support to internal and external stakeholders regarding security incidents and system configurations.
- Perform analysis of threat intelligence feeds and provide the recommendation of threat mitigation.
- Contribute to the development and implementation of threat intelligence feeds and use cases to enhance threat detection capabilities.
- Provide extra assistance to the team during heightened periods.
- Responsible for working in a 24/7 SOC environment.
x
