Performs the identification, remediation, and documentation of moderately complex security testing and vulnerability assessments. Monitors and performs standard analysis of system/network activity to detect malicious actions, documents initial triage of security events for escalation to incident management, and reviews and analyzes daily security events, with limited guidance. Responds to security events, performs initial investigation and triage, and carries out mitigation actions. Conducts data collection, preservation, log analysis, and basic forensic analysis of digital media. Coordinates with other teams to triage and fix security issues, implement detections, identify and address root causes, and contribute to innovation. Monitors security controls for compliance with regulatory requirements and prepares responses and actions to audits. Collects evidence for and provides technical support to the compliance team, with limited guidance.
Skills: incident management log analysis technical support