Job Description

• Provide analyst coverage to review alerts/incidents produced by customer bootstrapped monitoring setup.
• Coordinate incident response decisions and escalation, including IT/OT coordination as applicable.
• Establish minimum runbooks, reporting, and operational governance required for operation.

• Onboarding and access: create analyst accounts, validate connectivity (VPN/jump host), and assign tool roles.
• Service Desk Priority 1 On Call Rotation
• Expected Shift Work
• Willing to work holidays if necessary
• Alert understanding and triage: acknowledge, enrich, classify, and route alerts; create cases/tickets as defined.
• Incident coordination: initiate incident bridge, coordinate stakeholders, maintain timeline, and drive decision capture.
• Escalation management: follow the escalation matrix and severity model; notify on-call roles and vendors as required.
• Reporting: daily operational summary and incident reports (including post-incident review).
• ENVIRONMENT:
• CrowdStrike, Nozomi, Fortinet, and Fortigate FWs.
• CrowdStrike is the SIEM, EDR and VM

Job Tags

Similar Jobs