Conduct technical analysis and triage of triggered alerts from log sources to determine impact, scope, and corresponding remedial actions to mitigate incidents.
Analyze, triage, and process security threats to identify potential risk gaps and organizational impact by conducting in-depth analysis of threats, attack vectors, or intelligence.
Collaborate closely with the incident response centre’s threat intelligence team to enhance contextual analysis and provide threat hunting support related to Open Source Intelligence Indicators of Compromise.
Serve as a point of contact for end users and stakeholders, providing cybersecurity incident updates and related activities during incident coordination, remediation, and recovery.
Provide duty analyst support for incident response centre operations during weekends, utilizing a predefined duty roster to ensure 24/7 threat monitoring and alert handling following a follo...