Responsibilities Act as Incident first responder for a 24/7 staffed SOC Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting Monitor security sensors and review logs to identify network anomalies or intrusions Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices Escalate security incidents using established policies and procedures in a timely manner Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s) Perform initial analysis of security events, network traffic, and logs Assist with the development of incident response plans, workflows, and SOPs Work directly with threat intelligence analysts to convert intelligence into useful detection Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications Performing Response acti...