As the Cyber Defence Analyst, you will contribute to daily security operations by overseeing response activities for security events and alerts associated with cyber threats, intrusions, and compromises alongside a team of global security analysts following documented SLOs and processes. You will analyze events using security tooling and logging (e.g., SIEM, EDR) and assess potential risk / severity level of cyber threats; escalate higher-risk events to dedicated incident response and management teams in the CFC according to established processes.
You will also notify team Lead(s) of concerns related to operations and manage assigned caseload throughout the incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned. You will maintain all case documentation and help improve relevant strategies, Standard Operating Procedures (SOPs), and training materials.