KMC Solutions

General

• Conducting triage/categorization of potential Events and Incidents
• Conducting initial evidence collection, case creation, and coordination/hand-off to other teams as necessary
• Conducting full investigations
• Assisting senior leadership in determining critical incidents
• Responding in a timely manner (within documented SLA and Run Book) to support tickets.
• Contributing to Incident Handling documentation such as standard operating procedures, playbooks, briefings and executive reports
• Utilizing SIEM for detection and investigation of security events and incidents
• Utilizing case management tools to document and track investigations
• Performing threat mitigation as required
• And such other tasks as may be given by the EMPLOYER and/or Client analogous to the foregoing.

SOC L3 – Incident Responder

Agent

• Conducting triage/categorization of potential Events and Incidents
• Conducting initial evidence collection, case creation, and coordination/hand-off to other teams as necessary
• Responding in a timely manner (within documented SLA and Run Book) to support tickets
• Contributing to Incident Handling documentation such as standard operating procedures, playbooks, briefings and executive reports
• Utilizing SIEM for detection and documentation of security events and incidents
• Performing threat mitigation as required

SOC L3 – Incident Responder

SOC Agent – Incident Handling