Product Certifications on SOC Security Tools such as
SIEM/Vulnerability Management/ DAM/UBA/ SOAR/NBA etc.
Key Roles & Responsibilities
- Round the clock threat monitoring & detection
- Analysis of any suspicious, malicious, and abnormal behavior.
- Alert triage, Initial assessment, incident validation, its severity & urgency
- Prioritization of security alerts and creating Incidents as per SOPs.
- Reporting & escalation to stakeholders
- Post-incident Analysis
- Consistent incident triage & recommendations using playbooks.
- Develop & maintain incident management and incident response policies and procedures.
- Preservation of security alerts and security incidents artefacts for forensic purpose.
- Adherence to Service Level Agreements (SLA) and KPIs.
- Reduction in Mean Time to Detection and Response (MTTD & MTTR)