Security Operator I

Monitor and triage security alerts across SIEM, EDR, email, network, and cloud tools, then support incident response using established playbooks. Perform log analysis, validate indicators of compromise (IOCs), and investigate phishing and malware using file, URL, and domain analysis. Create and maintain incident tickets in an incident management system, document findings clearly, and work rotating 24x7 SOC shifts while collaborating with senior analysts and responders to continuously improve detection and response skills.