Soc Technical Lead
Current• Provide Incident Response support when analysis confirms actionable incident• Coordinate and advise on incident response actions taken by Incident Response Handlers for incidents affecting their areas• Develop and maintain formal, documented SOPs that are delivered for the SOC GWO's review and approval when developed or modified. SOPs provide the operational basis for the customer's SOC Concept of Operations (CONOPS)• Provides remedial recommendations and produces consistent comprehensive reports on findings. • Monitoring and recommendations of hardware and/or software tools that will assist in traffic analysis• Implementation, training, and SOP development and maintenance of implemented solutions• Pattern analysis, trend analysis, behavior analysis, and other specialized analysis• Training of fellow CSIRT Analysts in In-Depth techniques for maximizing information acquired from logs and SEIM tools.