Job Summary
Monitor and analyze security events and threats as part of a 24x7x365 SOC environment.
•
Perform daily triage of alerts and tickets, leveraging threat intelligence and escalating incidents as needed.
•
Act as a technical escalation point for SOC analysts and mentor junior team members.
•
Lead incident response activities, conducting technical investigations and providing expert guidance.
•
Conduct cyber threat research to enhance SIEM use cases and playbook development.
•
Perform proactive threat hunting and investigations without predefined indicators of compromise.
•
Collaborate with engineering teams to evaluate and implement new or updated security solutions.
•
Support and manage security tools including EDR, WAF, and NIDS platforms.
•
Automate repetitive SOC tasks to improve operational efficiency and reduce manual errors, using scripting and workflow tools.
•
Troubleshoot and resolve log related issues, ensuring minimal disruption to business operations and adherence to SLAs.
•
Support internal and external audits by providing evidence.
•
Participate in disaster recovery drills, security assessments, and SOC-related risk mitigation activities.
•
Work within ITSM frameworks to manage incidents, changes, and service requests.