Monitor security alerts from XDR, firewalls, and email security solutions.
Perform initial analysis and triage of security incidents.
Investigate suspicious login attempts, malware detections, and phishing emails.
Monitor endpoint protection health.
Ensure endpoint agents are up to date.
Assist with malware removal and endpoint remediation.
Support operating system and application patching.
Monitor firewall logs and VPN connections.
Assist in implementing firewall rules and security policies.
Monitor spam, phishing, and malware email reports.
Manage email quarantine and release legitimate emails.
Compliance & Documentation
Maintain cybersecurity documentation.