L2 SOC ENGINEER - INCIDENT RESPONSE

Monitor security alerts and events generated by security information and event management (SIEM) systems and other security tools.

Analyze and investigate security incidents to determine the root cause and impact.

Conduct in-depth analysis of network traffic and logs to identify indicators of compromise (IOCs) and potential security threats.

Coordinate incident response activities with internal teams and external stakeholders to ensure timely resolution of security incidents.

Escalate incidents to appropriate teams or management based on severity and impact.

Develop and maintain standard operating procedures (SOPs) and runbooks for incident detection and response.

Provide recommendations for improving security controls and mitigating security risks.

Stay updated on emerging threats, vulnerabilities, and attack techniques to enhance incident detection and response capabilities.