Security Operations

• A shift based schedule to continuously monitors the alert queue, prioritize and triage security and device alerts
• Receives phone calls from clients and create necessary ticket for the incident or request and channel it to the required team for action
• Collects data and context necessary to initiate investigation over to Cyber Threat Investigator
• Follows alerts and incidents playbooks/runbooks
• Primarily responsible for security monitoring, detection, response
• Ensure incident identification, assessment, reporting, communication, mitigation and monitoring
• Ensure compliance to SLA, process adherence and process improvements to achieve operational objectives
• Review policies and highlight the difficulties in managing SLAs
• Management, administration & maintenance of security devices
• Perform threat management, threat modeling, identify threat vectors and develop use cases for security monitoring
• Responsible for integration of standard and non-standard logs in SIEM
• Coordination with stakeholders, build and maintain positive working relationships with them

Security Operations Centre (SOC) Analyst, Level 1

Senior Security Operations Center Analyst

Cybersecurity Incident Response Analyst, Level 3