- Monitor network security events received from monitored servers, and then take appropriate action based on security policy (willing to standby on call 24x7)
- Proactive hunting enhancement
- Assist customers with security related issues
- Reviewing alerts detected in SIEM tools and escalate any suspicious event
- Responsible for troubleshooting related with software security issues
- Perform analysis of log files, includes forensic analysis of system resource access
- Carrying out all activities regarding SOC (Security Operation Centre) policies and SOC (Security Operation Centre) procedures
- Daily report and analysis for any alert/offense detected