What You'll Do

• Demonstrate foundational knowledge of cybersecurity concepts, including threat vectors, risk management, and incident response.
• Monitor and triage alerts using Adlumin SIEM and other SOC tools, with the ability to read and analyze logs such as Network logs, Identity and Access Management (IAM), Endpoint logs, Cloud activity, etc to identify suspicious behavior.
• Conduct initial investigations of security events to assess impact and determine if escalation is needed.
• Analyze logs from diverse security devices to identify trends, anomalies, and potential threats.
• Escalate validated incidents to Tier 2 for further analysis, following established SOPs and playbooks.
• Accurately document investigation findings and ensure detailed case notes for knowledge sharing and reporting.
• Collaborate with team members to support a 24x7 SOC operation and contribute to continuous threat detection improvements. ...