Perform 24×7 monitoring of security alerts and events generated by SIEM, EDR, IDS/IPS, Firewall and other security tools.

Analyze, investigate and respond to cybersecurity incidents.

Perform threat hunting and identify suspicious activities or indicators of compromise.

Escalate and coordinate incident response with relevant stakeholders.

Analyze security logs and prepare operational dashboards for monitoring and reporting.

Prepare and maintain documentation of security incidents, processes and procedures.

Continuously improve detection rules, playbooks and SOC operational processes.