Lead proactive hunting and analysis against the dataset (e.g., alerts, logs, etc.) and reverse engineering as needed to support Security Operation Centre (SOC) investigations and proactive threat detection and prevention.
Coordinate and facilitates in-depth analysis, trending, and root cause analysis of security events/incidents while creating and maintaining processes and procedures.
Perform advanced research on threats, vulnerabilities and potential threat vectors and work with multi-disciplines to improve prevention and detection methods.
Act as the technical subject‑matter‑expert for SOC related topics or during incidents,
Develops and documents the SOC procedures and processes based on industry best practices and internal requirements.
Support or lead projects to improve SOC effectiveness, advancing technical capabilities on pace with the latest threats.
Support and integrate with incident response, threat intelligen...