Typical tasks
- Monitoring SIEM dashboards and security alerts
- Triaging and investigating suspicious activity
- Responding to security incidents
- Running vulnerability scans and assessments
- Supporting risk and compliance reporting
- Writing security playbooks and post-incident reports