Security Operations Center Senior - Chuyên Viên Giám Sát Bảo Mật/An Ninh Thông Tin

- Security Operations:
+ Serve as a technical escalation point for SOC analysts in resolving complex security incidents.
+ Monitor, analyze, and optimize the performance of Microsoft Sentinel and related security tools.
+ Conduct advanced threat hunting activities to proactively identify and mitigate potential threats.
+ Lead detailed root cause analyses for incidents and recommend remediation strategies.
- System and Tool Optimization:
+ Assist in development and refine detection rules, alerts, and dashboards in Microsoft
Sentinel to enhance SOC efficiency.
+ Collaborate with IT and security teams to integrate new tools and optimize existing SOC workflows.
+ Evaluate and implement emerging technologies to improve threat detection and response capabilities.
- Incident Response:
+ Coordinate and manage incident response efforts for critical security events.
+ Ensure timely containment, eradication, and recovery during security incidents.
+ Document and share lessons learned from security incidents to drive continuous improvement.
- Mentorship and Training:
+ Provide guidance and technical support to junior SOC analysts, fostering their growth and development.
+ Conduct training sessions to enhance the team's proficiency in threat detection and analysis.
- Threat Intelligence and Reporting:
+ Integrate threat intelligence into SOC processes to bolster proactive defense measures.
+ Prepare detailed reports on incident trends, security metrics, and recommendations for stakeholders.