Security Operations

• Capture detailed notes and deliver precise, accurate reports to stakeholders during high-pressure scenarios, ensuring all action items are effectively communicated and delegated to the Cyber Defense team or partners for execution; throughout the lifecycle of an incident.
• Collect evidence from cyber events and utilize data to build a complete chain of events from initial access through eradication and recovery phases
• Advise and coordinate with Incident Commander by providing trusted expert advice to support the successful conclusion of a cyber incident
• Receive and analyze signals from numerous sources to determine possible causes of alerts
• Conduct, document and report postmortem lessons learned that contribute to the improvement of the team and the organization’s cyber program.
• Develop and communicate reports on Cyber Defense TTPs, guidance, and incident findings to various stakeholders
• Advise and collect forensically sound artifacts for inspection to support cyber incidents
• Engage with both technical and non-technical stakeholders in a professional manner both internally and externally to the business on sensitive cybersecurity issues.
• Develop training and exercises to promote both team and organizational development to improve delivery during incidents, through the creation and conduction of tabletops and workshops.
• Work as part of a global team
• Be the Incident Response SME

Cyber Security Incident Response Lead

SOC Analyst

Embedded VSOC Analyst

Security Operations Analyst

Lead CyberSecurity SOC Analyst