Your mission
- You monitor security alerts, incidents, and logs in SIEM.
- You identify threats and suspicious activity in Entra ID (Azure AD) logs.
- You investigate alerts in Defender XDR across endpoints, identities, email, and cloud.
- You triage alerts and escalate incidents when needed.
- You document incidents, investigation steps, and lessons learned.
- You perform proactive threat hunting using multiple log sources.
- You correlate alerts across identity, endpoint, and network layers.
- You tune alert rules to reduce false positives.
- You collaborate with IT, DevOps, and application teams to resolve incidents.
- You recommend improvements to detection rules, playbooks, and response workflows.
- You contribute to SOC documentation, runbooks, and SOPs.
Your email job alert is now active!
