Monitor SIEM, SOAR, and UEBA platforms on a 24 7 basis for security events and alerts.
Perform initial triage, validate security incidents, and classify alerts based on SOPs.
Monitor log collection, platform health, automation workflows, and data ingestion status.
Create and update incident tickets, maintain investigation records, and prepare operational reports.
Escalate confirmed security incidents, failed automation workflows, and anomalous user activities to the L2 team.
Coordinate with IT and security teams during incident response and service restoration.
Verify the successful execution of automated playbooks and security workflows.
Adhere to SOC processes, SLAs, escalation matrix, and documentation standards.
Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.