Alert Management – Log, analyze, and remediate security alerts; conduct after-action reviews and maintain clear documentation of incidents and response activities.
Threat Hunting – Proactively hunt for indicators of compromise (IOCs), monitor industry threat alerts and advisories, and investigate anomalies and suspicious IP activity.