Key Responsibilities

• Perform in-depth analysis of security events escalated by L1 analysts to determine scope, impact, and appropriate response actions.
• Investigate and respond to security incidents, including malware infections, phishing attacks, unauthorized access, and other cybersecurity threats.
• Conduct root cause analysis and recommend remediation and preventive actions.
• Utilize threat intelligence feeds and tools to enhance the detection and investigation process.
• Collaborate with other IT/security teams to contain and resolve incidents.
• Maintain and improve incident response runbooks and playbooks.
• Assist in tuning and optimizing SIEM rules, correlation logic, and alerts to reduce false positives.
• Mentor and support L1 analysts to ensure consistent incident handling practices.
• Prepare incident reports and executive summaries for management or customers.
• Participate in red/blue t...