Key Responsibilities:

• Monitor and track alerts from SIEM systems to identify abnormal activities.
• Perform initial analysis of incidents and assess their significance.
• Escalate suspicious incidents to SOC Tier-2 for deeper analysis.
• Accurately document all activities and alerts in incident logging systems.
• Collaborate with other teams during critical threat events.

Required Skills and Qualifications:

• Understanding of basic network concepts, operating systems, and network services.
• Ability to identify, analyze, and document security incidents, including attack processes and their impacts.
• Proficiency in managing various SIEM systems, such as Splunk and APK SIEM.