Responsibilities-Security Monitoring and Incident Response:

📍Implement and continuously monitor security events and alerts using SIEM technologies. 📍Conduct in-depth analysis of security incidents, utilising forensics and log analysis, to determine the root cause and extent of the compromise. 📍Develop and enhance incident response processes, ensuring a swift and effective response to security incidents. 📍Conduct tabletop exercises to simulate and evaluate the organisation's incident response capabilities. 📍Provide guidance and mentorship to the SOC team during incident investigations, fostering a collaborative and knowledge-sharing environment. 📍Collaborate with external incident responders and law enforcement agencies when necessary. 📍Contribute to security awareness initiatives by providing insights and recommendations based on incident analysis. 📍Prepare and deliver comprehensive reports on security incidents to both stakeholders and technical audiences.

Responsibilities-Threat Intelligence:

📍Collect, analyse, and disseminate threat intelligence to stay ahead of emerging cybersecurity threats. 📍Evaluate the relevance and impact of threat intelligence on current security controls and recommend adjustments as needed. 📍Implement and integrate threat intelligence feeds into security monitoring tools to enhance detection capabilities. 📍Collaborate with industry peers and organisations to share threat intelligence and best practices. 📍Develop threat hunting strategies to proactively identify and mitigate potential threats.