Security Operation Center/SOC L1

Responsibilities:

• Monitoring SOC Operations 24/7 (shifting).
• Provide expertise to help improve security domains (indetify, detect, prevent, respond, and recover) of the organization.
• Create, verify, and fine-tune security rules for automated detection and remediation.
• Maintain security tools and processes for protection, monitoring, and remediation.
• Manage ticketing system (create, workflow, and resolve issue).
• Investigate security events and incidents: collect evidence and work across teams to isolate and/or remediate as necessary, document best practices found as a baseline for further improvements to avoid similar issues.