Security - Role
SOC analyst
(Security Operations Centre analyst)
Monitors security alerts and investigates suspicious activity as part of a security operations team
What's it for?
Watches security alerts and investigates suspicious activity so real threats can be identified and handled.
For example…
A SOC analyst investigates a malware alert, checks whether other devices contacted the same malicious domain and escalates the confirmed incident
During a quiet shift, the analyst tunes noisy detections so the SOC spends less time on false positives