KMC Solutions

Agent

• Conducting triage/categorization of potential Events and Incidents
• Conducting initial evidence collection, case creation, and coordination/hand-off to other teams as necessary
• Responding in a timely manner (within documented SLA and Run Book) to support tickets
• Contributing to Incident Handling documentation such as standard operating procedures, playbooks, briefings and executive reports
• Utilizing SIEM for detection and documentation of security events and incidents
• Performing threat mitigation as required

SOC Agent – Incident Handling