To monitor, investigate, and respond to cybersecurity alerts to ensure timely detection and resolution of threats and reduce security risks to the organization.

• Monitor cybersecurity tools and platforms (e.g., SIEM, IDS/IPS, EDR) for alerts and anomalies.
• Analyze security alerts to determine scope, severity, and potential impact.
• Triage alerts to differentiate between false positives and genuine security incidents.
• Investigate suspicious activities, unauthorized access attempts, and potential breaches.
• Escalate critical incidents to appropriate teams and management as per response procedures.
• Coordinate containment, eradication, and recovery actions during security incidents.
• Document incidents, investigation steps, and resolution outcomes in incident management systems.
• Maintain and update incident response playbooks and procedures.
• Collaborate with IT and infrastructure teams to remediate identified vulnerabilities.
• Generate periodic reports on alerts, incidents, and response effectiveness.