Monitor & DetectIncident ResponseTriageInvestigations Threat AssessmentsVulnerability ScanningPenetration Test Mgmt.Red TeamTrain and manage tier I & II analystsManage PlaybooksNetwork troubleshootingNetwork Architecture/Topology assessment

1. Provide effective security monitoring through triage, investigation, containment and communication ofsecurity incidents to include validation of incidents as needed and performing the deeper dives into events andincidents for mitigation of events.2. Serve as a mentor and escalation point for junior analysts.3. Develop processes, SOP’s, workflows and playbooks.4. May lead dedicated team(s) for Threat Hunting, Digital Forensics, Incident Response and Red/Blue Team asrequired.5. Inform or advise SOC Management on incidents and incident prevention methodologies.6. Assist in identifying opportunities to improve internal processes and tools for operational capabilities orefficiencies.7. Provide Tier 2 support, following processes and interacting appropriately with both other analysts, customersand partners when required.8. Perform Cybersecurity Operations Analyst duties as required

1.Monitor and analyze logs and alerts from a variety of different technologies acrossmultiple platforms in order to identify and mitigate incidents. This includes analysisof logs from: IDS/IPS, firewall, proxies, anti-virus and end-point protection, serversand workstations and other security technologies and devices.2. Assess the security impact of security alerts and traffic anomalies to identifymalicious activities and take mitigating actions or escalates to senior members ofteam as appropriate.3. Leverage fundamental understanding of Operations Systems (Windows, Unix/Linusand OSX) in support of identifying security incidents and to have a proper overviewof risk profile.4. Execute analysis of email based threats to include understanding of emailcommunications, platforms, headers, transactions and identification of malicioustactics, techniques and procedures.5. Utilize and adhere to defined workflow and processes driving threat monitoring andescalation/handoff actions.6. Document results of cyber threat analysis effectively and prepare comprehensivehandoff and/or escalation as appropriate.7. Create and utilize playbooks, standards and procedures.8. Write reports.9. Provide scripting capabilities.10. Participate in appropriate opportunities for continuing education, seminars,organizations, etc.11. Work Cybersecurity Operations tickets.

Case management, Troubleshooting, and the overseeing of engagements such as penetration testing, remote social engineering, and vulnerability scanning.