Security Monitoring & Investigation Real-Time

"Security Monitoring & Investigation Real-Time "eyes on glass" Monitoring Escalate suspicious activities and anomalies Work assigned ticket queue Review alerts from QRadar SIEM Coordinate with Response team to accept feedback on previous escalations Provide feedback to SIEM Admin on tuning and config Hunter Analysis - Response (OPS) Accept escalations from Monitoring & Investigation Provide feedback to Monitoring & Investigation Escalate events to Incident Response team (CSIRT) when needed Coordinate with IT Admins to develop needed changes (patches, configs, etc.) "

start: asap
duration: untill year-end but prolognation till 12 months

Requirements:
SOC Analyst / SIEM (pref Qradar) / Incident Handling & Response - "Security Monitoring & Investigation Real-Time "eyes on glass" Monitoring Escalate suspicious activities and anomalies Work assigned ticket queue Review alerts from QRadar SIEM Coordinate with Response team to accept feedback on previous escalations Provide feedback to SIEM Admin on tuning and config Hunter Analysis - Response (OPS) Accept escalations from Monitoring & Investigation Provide feedback to Monitoring & Investigation Escalate events to Incident Response team (CSIRT) when needed Coordinate with IT Admins to develop needed changes (patches, configs, etc.) "

SOC Analyst / SIEM (pref Qradar) / Incident Handling & Response - "Security Monitoring & Investigation

Real-Time "eyes on glass" Monitoring
Escalate suspicious activities and anomalies
Work assigned ticket queue
Review alerts from QRadar SIEM
Coordinate with Response team to accept feedback on previous escalations
Provide feedback to SIEM Admin on tuning and config
Hunter Analysis
Response (OPS)
Accept escalations from Monitoring & Investigation
Provide feedback to Monitoring & Investigation
Escalate events to Incident Response team (CSIRT) when needed
Coordinate with IT Admins to develop needed changes (patches, configs, etc.)