Operation, monitoring and further development of SOC systems (e.g., SIEM, vulnerability scanners), including configuration, patch management and data source onboarding.
Independent analysis, evaluation and handling of security-relevant events throughout the entire incident lifecycle, including derivation, coordination, implementation of appropriate measures and documentation.
Conducting in-depth log analyses and forensic investigations to detect and assess security-relevant incidents.
Development and maintenance of detection logics, use cases and dashboards for continuous improvement of security monitoring.
Linked-in
Google