•Responsible for managing and mentoring a team of SOC Analysts who are responsible for monitoring and responding to cyber-threats•Establishing and delivering KPIs, determining any gaps in performance and implementing change to improve effectiveness and quality•Monitoring and responding to cyber threats against Customers, interacting directly with Customers to advise and act as their security partners to resolve identified risks•Investigating alerts and seeking out potential security issues through troubleshooting, log analysis and the use of the SIEM•Responding to security incidents that meet the threshold for a Critical and High Severity.•Supporting the training and development plans of SOC Analysts•Support the SOC Manager in the selection of new employees, establishing performance priorities and goals, carrying out and documenting performance evaluations•Helping to make the team even more successful by regularly contributing to the SOC knowledgeable with findings from investigations of different attacker tools, tactics, and procedures•Helping to improve customers’ security posture against external attackers and threats through fine-tuning and rule creation•Creating regular meaningful reports for customers, threat intelligence briefings and white papers•Working with the development team to develop customer dashboards and make recommendations to improve the SOC’s monitoring capability.•Develop an After-Action Reports to conduct a post-incident review•Analyze events, volumes, alerts and advance analysis of Potential Security incidents/threats•Suggest the tuning of alerts to have a healthy console reducing the False Positives•Work with the Customers during crisis times to help mitigate the crisis and advise the client for an improved security posture to mitigate or minimize another incident•Proactively hunt for threats to detect security incidents that may elude the grasp of automated systems and advice the Customers on how to mitigate them

Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations.Help the Data Scientists to recognize and codify attacker tools, tactics, and procedures into rules which can be applied to current and future investigations.Monitoring and responding to cybersecurity threats against clients, and interacting directly with customers to advise and act as their security partners to resolve identified security risks.Investigating alerts and seeking out potential security issues through troubleshooting, log analysis, and use of Invinsec's SIEM.Helping to make the team even more successful by regularly contributing to the SOC Knowledgebase with findings from investigations of different attacker tools, tactics, and procedures which can be applied to future investigations.Helping to improve customers' security posture against external attackers and threats through fine-tuning and rule creation.Creating regular meaningful reports for customers.Working with the development team to develop custom dashboards and make recommendations to improve the SOC monitoring capability.

SurveillanceInvestigationsBackground researchFinding peopleFinding assetssome others.

Hardware and Software support.Security analysis in general.Monitoring and analysis.Reports. Managing the staff.Arranging appointments with the clients.

Analysis of evidences, dealing with clients, report's creation, criminologist assistant, deep investigations, reconstruction of scene.

Several Roles