L1 Cybersecurity Analyst
The duties in this level are the following: - Analysis and notification of incidents in a number of SIEM and EDR technology correlators. - Management and monitoring of those incidents in ticketing tools. - Communication with clients and other cybersecurity teams, as well as telephone support for the service. The software involved in the development of the above-mentioned activities is: - SIEM: RSA, McAfee, Splunk, Sentinel, AlienVault, CheckPoint Harmony, ArcSight etc. - EDR: Falcon CrowdStrike, Microsoft Defender ATP, Cytomic, Cortex XRD, etc. - Ticketing: BMC Remedy OnDemand and ServiceNow.