Deliver security-based operational support for Managed Service customers, in line with documented process and timeframe
Researchers on Threat or Security related news that could potentially impact a client
Proactive hunting in large volumes of data depending on IOCs or TTPs, threat profiling and validation
Receives escalations from customer or management of related to Incident Response which may lead to deeper analysis. Tasks will include creation of a timeline, provide tactical and strategic recommendations, prepare the post incident report and after-action review
Coordinates tasks to determine goal and status of investigation
Handles communication to a mix of technical and non-technical client audience
Compute and then create scan schedule for vulnerability management, coordinated remediation including ad-hoc requests
Creates custom reports based on the data gathered on a weekly/monthly basis
Develop use case and operational playbooks
Documents encountered processes for SOC users
Providing analytical and technical support to solve a wide range of complex security issues
Participate in open communication between team members
Creates the SOC schedule based on operational demand while fulfilling the employees request of a leave
Perform performance assessment and merit for the team members
Understudy the SOC Manager and be prepared to fill that role when required