Monitor and triage alerts from SIEM, EDR, email security, and cloud security platforms; investigate, classify, and escalate to senior analysts as needed.
Identify Indicators of Compromise (IOCs) and follow established playbooks to contain low-severity incidents.
Provide day-to-day administration of cybersecurity systems (rule reviews, basic policy changes, health checks, triage incidents, escalate findings as necessary).
...