SOC Analyst

- Continuous Monitoring: I will monitor security tools, including Security Information and Event Management (SIEM) systems, to detect suspicious activity, responding efficiently and professionally to potential threats. - Incident Triage: I will analyze alerts and logs to determine the nature of an event, methodically classifying and prioritizing incidents following established procedures. - Initial Incident Response: For confirmed incidents, I will perform initial containment actions, such as isolating affected systems, and escalate the incident to a Level 2 or 3 analyst for deeper investigation. - Reporting and Documentation: I will create detailed tickets and reports for all detected incidents, documenting my findings and actions taken for effective tracking and future analysis. - Tool Management: I will assist in the maintenance and optimization of security tools, ensuring they are functioning correctly and effectively. - Managing (Lead Analyst only): I will provide direction and support to junior team members and facilitate handovers to the next shift leader.