​Responsibilities

• Act as Incident first responder for a 24/7 staffed SOC
• Perform security monitoring, vulnerability management, data loss / policy violation prevention and threat hunting
• Monitor security sensors and review logs to identify network anomalies or intrusions
• Provide analysis from monitoring, research and assessment of security log data from a large number of heterogeneous security devices
• Escalate security incidents using established policies and procedures in a timely manner
• Liaise with Ensign customers on security intrusions, identifying root cause and recommend mitigation step(s)/ remedial action(s)
• Perform initial analysis of security events, network traffic, and logs
• Assist with the development of incident response plans, workflows, and SOPs
• Work directly with threat intelligence analysts to convert intelligence into useful detection
• Monitoring the Managed Endpoint and Detection Response (MDR) platforms and performing analysis for notifications
• Performing Response action on Managed Endpoint and Detection Response (MDR) platforms based on standardize workflow and agreement with clients.
• Act as a liaison party for configured alerts to monitor performance of security sensors and tools
• Fulfil Change Requests, Service Requests and respond to internal / external enquiries with regards to Incident Management