Security Operations

• A shift based schedule to continuously monitor the alert queue, prioritize and triage security and device alerts
• Receives phone calls from clients and creates necessary tickets for the incident or request and channels it to the required team for action
• Collects data and context necessary to initiate investigation over to Cyber Threat Investigator
• Follows alerts and incidents playbooks/runbooks
• Primarily responsible for security monitoring, detection, response
• Ensure incident identification, assessment, reporting, communication, mitigation and monitoring
• Ensure compliance to SLA, process adherence and process improvements to achieve operational objectives
• Review policies and highlight the difficulties in managing SLAs
• Management, administration & maintenance of security devices
• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring
• Coordination with stakeholders, build and maintain positive working relationships with them

Security Operations Centre Analyst, Level 1

Intermediate Analyst, Security Operations