Found Description
The Mid-Level Cyber Defense Analyst uses defensive measures and information collected from a variety of sources to identify, analyze, and report vulnerabilities and malicious events. This role focuses on maintaining the integrity of our internal and cloud networks by conducting deep-dive analysis of security data, recognizing operational trends, and leading initial incident containment efforts.
Responsibilities
- Investigate security alerts escalated by SOC Level 1 analysts.
- Perform deeper analysis of suspicious activity across SIEM, EDR, network, identity, cloud, and email security platforms.
- Validate whether security events represent false positives, suspicious behavior, policy violations, or confirmed cybersecurity incidents.
- Correlate events across multiple log sources to identify attack patterns, affected assets, compromised accounts, lateral movement, malware activity, or unauthorized access.
- Determine the scope,...