Roles & Responsibilities:

Monitoring & Alert Handling

• Continuously monitor security alerts and events from SIEM tools and security platforms.

• Identify and categorize suspicious activities, malware alerts, phishing attempts, and intrusion attempts.

• Assist in triaging and prioritizing security alerts based on severity levels.

Investigation & Analysis

• Perform initial investigation on security events to determine potential threats or false positives.

• Gather and analyze logs from various sources (firewalls, endpoint security, network devices, applications).

...