1. Managed Detection and Response Administration. Monitoring and analyzing the High and Medium Severity tickets raised for the IT Assets integrated with MDR.
2. Track Incident detection and reporting.
3. Incident closure.
4. Incident escalation.
5. Identify new alert requirement.
6. Ensure services are being provided within SLA parameters.
7. Performing periodic DR drill. 8. Follow-up up departments for closure of various reports / Incidents and escalate the long outstanding issues / Change Management / Problem Management. 9. Create and Submit Weekly Activity Summary Report, Monthly Security Report pertaining to Managed SOC services and technologies, Monthly Incident Reports, Monthly shift schedule.
8. Reviewing Daily, Weekly, Monthly and Quarterly all SOC reports.
9. Perform review of Firewall Requests and provide recommendations before approving.
10. Involvement during POC conducted by customer for current security solutions.
11. Perform Vulnerability Assessments of Network, Security, Windows and Linux technologies. Assist team while performing closures related to these technologies.
Sending report of closures performed vs open observations vs exception needed.
12. Giving implementation sign off as a service provider to customer for new solution implementations that are done.
13. Reviewing customer policies and aligning the technical aspects of on premise technologies with respect to it.
14. Conduct Weekly and Monthly meetings with customer thereby presenting achievements, next plans and improvement areas.
15. Investigate and streamline Security Incidents.
16. Reviewing SOPs and knowledge base articles.
17. Reviewing Security alerts like virus activity, network security events, application compliance, asset monitoring and firewall alerts.
18. Reviewing Firewall Access Policy Rules review, Router ACL review, WAF & IPS Signature Review, Websense URL Filtering policy reviews Review closure report of Cisco Router and Switches closure plan review.
19. Review action plan of Risk Assessment prepared by Team and track closures.