Info Sec Analyst job to monitor and analysis logs based on siem solution or log collector for the enviorment to check if there's any security incident -Firewalls -Systems and Network Devices -Web Proxies -Intrusion Detection/Prevention Systems -Data Loss Prevention -Antivirus Systems -OneNote Framework -Monitor incoming event queues for potential security incidents using Azure Sentinel per operational procedures. -Perform initial investigation and triage of potential incidents, and escalate or close Incidents as applicable. -Use available SOC tools for historical analysis purposes as necessary for detected Alerts/Incidents; for example, historical searches using Azure Sentinel Log Analytics. -Monitor SOC e-mail queue for potential event reporting from outside entities and individual users. -Maintain SOC shift logs with relevant activity from analyst shift. -Document investigation results, ensuring relevant details are passed to the Secondary Analysts for final event analysis. -Update/reference SOC collaboration tool (Wiki, OneNote) as necessary for changes to SOC processes and procedures, and ingest of SOC daily intelligence reports and previous shift logs.
