​​T2 AS&W Analyst – Night Back ​

- I will utilize state-of-the-art technologies such as Endpoint Detection & Response (EDR) tools, log analysis (Splunk), and network forensics for investigative activities. - I will monitor alerting channels for multiple endpoint and network tools and escalate alerts according to defined processes, procedures, and playbooks. - I will triage alerts to determine the nature of activity on customer networks, systems, servers, and mobile devices. - I will conduct log analysis to support incident response efforts. - I will recognize attacker and APT activity, aggregate indicators of compromise (IOCs), and improve monitoring and incident response. - I will develop security content, scripts, and tools to enhance incident investigation processes. - I will lead incident response activities and mentor junior SOC staff. - I will create detailed reports for customer leadership, emphasizing accuracy and timely data for briefings. - I will effectively communicate technical details and findings to stakeholders and customers. - I will work with key stakeholders to implement remediation plans in response to incidents. - I will identify root cause findings and communicate them to technical staff and leadership. - I will ensure effective communication with customer leadership regarding critical incidents.