SOC Specialist

Що робити

• Security Monitoring & Investigation
• Monitor and investigate security alerts across SIEM, EDR/XDR, cloud, identity, network, email, and application telemetry.
• Perform advanced triage and investigation of suspicious and confirmed security incidents.
• Correlate events across multiple data sources to identify attack patterns and determine scope and impact.
• Investigate endpoint, identity, network, cloud, phishing, malware, and account-compromise incidents.