Description

SOC:

• Monitor security alerts and events from various sources including SIEM, EDR, IDS/IPS and cloud security platforms.

• Execute initial triage and in-depth investigation of security incidents.

• Develop and maintain incident response procedures, threat detection use cases and runbooks.

• Collaborate with internal teams to investigate security events, perform root cause analysis, and implement corrective actions.

• Participate in threat hunting activities and contribute to the enhancement of detection capabilities.

• Support tuning and maintenance of SIEM rules, alerts and dashboards.

• SOC document and reporting.

Key Skills

Education

Not specified