Develop and deploy use-cases to detect security threats into our SIEM from the log collection to the incident handling playbook. Fine-tune detection rules to minimize false positives and false negatives.
Maintain detailed documentation of use-cases, ensuring transparency and accountability.
Manage execution of standard procedures for the content management, change management and lifecycle management of the use-cases.
Work closely with other IT and security teams to develop specific use cases and to enhance the overall security posture of the organization. Share insights and recommendations to improve overall cybersecurity posture.
Regularly review and update use-cases to adapt to the evolving threat landscape and incorporate new threat intelligence.
Manage reports, dashboards, metrics for CyberSOC KPIs and presentation to senior management & other stakeholders.
