THEOS Cyber

Security Operations

• Monitor and triage security alerts from SIEM, EDR, and other security tools
• Perform alert analysis including threat identification, severity classification, and data gathering
• Conduct incident analysis and investigation
• Execute response actions (manual or automated) to contain or remediate threats
• Provide recommendations based on incident findings
• Gather additional information as required by customers or escalation teams
• Escalate complex incidents to L2/L3 teams when necessary
• Document incidents, actions, and findings in ticketing systems
• Ensure compliance with SLAs and SOPs
• Participate in shift rotations (including nights, weekends, and holidays)
• Collaborate with team members and contribute to continuous improvement initiatives

L1 SOC Analyst