Description
Responsible for analyzing and responding to security incidents, with a focus on investigating alerts, containing threats, and supporting SOC operations.
The professional will be responsible for conducting in-depth analyses, interacting with security tools, and contributing to the continuous improvement of detection and response processes.
### **Responsibilities**
* Analyze critical alerts and events from SIEM tools
* Investigate and respond to incidents related to phishing and spam
* Utilize EDR/XDR solutions (e.g., Trend Micro) for threat containment and mitigation
* Handle security-related requests (e.g., USB authorization and website access)
* Execute incident response playbooks and propose process improvements
* Record and document analyses, evidence, and actions taken
### **Requirements**
* Practical experience with SIEM, including event investigation and correlation
* Experience with Trend Micro tools (Vision One, Apex One)
* Knowledge of network protocols and traffic analysis
* Experience with ticketing systems (ServiceNow, GLPI or similar)
* Experience in security incident response
**Desirable**
* Trend Micro Certified Professional certification
* CompTIA CySA\+ certification
* Prior experience in structured SOC environments