Security Operations

• Monitor security alerts generated by SIEM, EDR, firewall, and email security systems
• Perform initial triaging to validate, categorize, and prioritize alerts
• Investigate phishing emails, malware alerts, and user-reported incidents
• Escalate complex incidents to Tier 2/3 analysts with proper documentation
• Use enrichment tools like VirusTotal, AbuseIPDB, Shodan, and Whois to support investigations
• Correlate Indicators of Compromise (IOCs) using threat intelligence feeds
• Create, update, and manage tickets in ServiceNow or similar case management platforms
• Document analyst actions and maintain accurate incident records for audits and lessons learned
• Collaborate with SOC peers, IT, and network teams for efficient resolution
• Follow SOC playbooks, escalation paths, and SLA timelines
• Participate in shift handovers and analyst retrospectives

Analyst, Cybersecurity Operations, SOC

SOC Analyst

SOC Analyst I

Head of Global IT Infrastructure, Security Operations

Cyber Operations Analyst

Senior Safety and Security Operations Manager