- Learn client environments and the security tools used to protect them
- Monitor, review, and triage security alerts and incidents under the guidance of senior SOC analysts
- Work with cloud and on-premise security technologies commonly used in enterprise and legal-industry environments
- Assist with investigation of security events such as phishing, malware detections, suspicious logins, and policy violations
- Document findings, actions taken, and next steps clearly within the ticketing system
- Escalate security events appropriately based on defined SOC procedures
- Follow established incident handling, alert triage, and communication workflows
- Participate in SOC knowledge sharing, training sessions, and team handoffs as required
- Maintain awareness of common threat types, attacker techniques, and defensive controls
Cybersecurity