Ensure monitoring use cases are aligned to enterprise threats, critical assets, privileged activity, identity risks, application exposure, and business priorities to maximize detection coverage and relevance.
Own SOC reporting including alert volume, true positive rate, incident trends, recurring control gaps, service levels, and remediation follow-up to provide leadership with clear and timely visibility into security posture.
Lead post-incident reviews and ensure lessons learned are converted into sustainable, measurable control improvements....
Ensure monitoring use cases are aligned to enterprise threats, critical assets, privileged activity, identity risks, application exposure, and business priorities to maximize detection coverage and relevance.
Own SOC reporting including alert volume, true positive rate, incident trends, recurring control gaps, service levels, and remediation follow-up to provide leadership with clear and timely visibility into security posture.
Lead post-incident reviews and ensure lessons learned are converted into sustainable, measurable control improvements....