- Performing Incident Response and Compromise Assessment (Threat Assessment) activities in companies under consultancy.- Identifying the root causes of cyber attacks occurring in companies under consultancy.- Collaboration with the team in on-site or remote interventions after a cyber attack.- Performing Digital Forensics on compromised machines using forensic tools.- Developing custom rules on EDR-XDR-SIEM products for detected IOCs and conducting threat hunting studies.- Research on new cyber threats, actors, and technologies affecting the organization and the industry.- Preparing and presenting the examination and analysis of the cyber attack as a report to the customer.- Providing support for configuration and policy of EDR-XDR security products.

- Finding the root cause, resolving and taking necessary actions of incidents escalated from L1.- Maintaining necessary incident response procedures after determining the size/impact of the event that caused by the security breaches.- In-depth analysis and incident response of security breaches and cyber security incidents on the customers and reporting all process.- Identify and prevent vulnerabilities/security threats occurred in customers’ network and systems.- Analyzing and reporting the alarm statistics of the customers every month and performing the necessary false positive studies.- Maintaining threat hunting processes and create rules for EDR products.

- Watching security events 24/7 from SOAR, SIEM, MDR and other Network and Security Devices.- Finding and investigating cyber security incidents, security breaches on security products.- Help with incident response steps: communicating with IT and response teams, conducting in-depth analysis.- Document and disseminate reports and notifications of findings in a timely SLA.- Preparing and sending monthly activity reports for customers using SOC and MDR products.