- Monitors network/SIEM alerts
- Manages and configures network/security monitoring tools
- Prioritizes alerts or issues and conducts triage
- Conducts vulnerability assessments and penetration tests and reviews alerts that keep abreast of the industry’s threat intelligence/news and security data
- Major Incident Response – Teams up with the Level 2 Analyst in responding and contains the incidents
- Receives incidents and performs in-depth investigation
- Identifies the threat, nature of the attack and the systems/data impacted by correlating with threat intelligence
- Expert team focused on network/security aspects of the information systems
- Support the NSOC as a part of development or operations team