The SecOps Analyst is responsible for monitoring and responding to security incidents, managing alerts, conducting initial investigations, and escalating threats when necessary. The analyst helps safeguard organizational information assets by maintaining an active defense against cyber threats.
Key Responsibilities
- Monitor security alerts and events from various security tools (SIEM, IDS/IPS, antivirus, firewalls, Phishing tool).
- Perform real-time security event analysis and triage.
- Investigate suspicious activities, anomalies, and security incidents.
- Escalate critical security incidents to senior analysts or incident response teams.
- Document all incidents clearly, comprehensively, and concisely in the ticketing system.
- Follow established incident response procedures and suggest improvements.
- Maintain up-to-date knowledge of the cyber threat landscape and emerging threats.
- Collaborate with other teams (IT, R&D, Compliance) to mitigate risks and vulnerabilities.
- Conduct periodic security reporting and dashboards for management review.