Security Operations

• Monitor security events and alerts from SIEM, EDR, IDS/IPS, firewalls, and cloud security tools
• Analyze logs and alerts to identify potential security incidents or anomalies
• Perform initial triage to determine severity, impact, and scope of threats
• Escalate validated incidents based on defined procedures
• Investigate and respond to security incidents (e.g., phishing, malware, unauthorized access)
• Contain and remediate threats in collaboration with IT, Engineering and security teams
• Document incidents, actions taken, and lessons learned
• Support post-incident reviews and root cause analysis
• Leverage threat intelligence feeds to identify emerging threats and indicators of compromise (IOCs)
• Conduct proactive threat hunting activities to detect hidden threats
• Update detection rules and use cases based on the evolving threat landscape
• Support vulnerability management activities (scan review, prioritization, remediation tracking)
• Assist in patch validation and security control effectiveness testing
• Collaborate with engineering teams to improve security controls and detection capabilities
• Maintain accurate incident logs and case management records
• Prepare daily/weekly SOC reports and dashboards
• Develop and update incident response playbooks and runbooks
• Other duties as assigned by the CISO.

See all jobs on JobTailor

Security Operations Center Analyst