Triage, investigate and escalate alerts as they occur in Wix environments (all analysts review all alert types - we don’t want to silo you!)
Monitor and analyze Security Information and Event Management (SIEM) to identify security issues for remediation
Pull data from multiple sources, including endpoint detection and response, internal data feeds, threat intelligence and advanced phishing protection
Use a Security Orchestration & Automation (SOAR) system to inform and expedite your data analysis
Work with our internal security and critical incident response teams to share knowledge, training, and best practices
Complete training on the technologies you’re monitoring, incident response, and other technical security topics
Recommend changes to standard operating procedures and similar documentation
Respond to computer security incidents by collecting, analyzing and preserving digital evidence to ensure incidents are recorded and tracked in accordance with SOC requirements
Generate end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty