- Maintaining, developing, and tuning of all SOC policies and operational procedures.
- Regularly review the processes and procedures followed by the SOC team and propose changes if there is a scope for improvement.
- Reporting & ensuring the SOC is fully compliant to the defined process and its operational SLAs.
- Measures SOC performance metrics and communicates the value of security operations to leaders.
- Maintaining SOC team availability 24x7x365.
- Quality Review of all SOC reports.
- Supervises and review the operations and activities carried out by the SOC team.
- Manages the escalation process and reviews incident reports.
- Regularly monitor and review the incident and cases records.
- Regularly track the Timeline compliance of the SOC activities.
- Take measures to carry out SOC activities in an effective and efficient manner.
- Develop and evaluate metrics to measure the performance of the SOC team.
- Co-ordinate with the external teams during incident management.
- Submit incident drill summary report to management and propose changes in the process if necessary.
- Analyze and report organizational security posture trends.
- Analyze and report system security posture trends.
- Conduct and/or support authorized penetration testing/vulnerability assessment on enterprise network assets.
|
