Netcenter

• Configure and maintain protection policies in SIEM/XDR/EDR solutions • Perform detection tuning to improve alert quality • Reduce false positives and operational noise • Validate detection coverage based on the MITRE ATT&CK framework • Identify protection gaps on endpoints • Adjust alert severity and prioritization • Configure automatic blocking and containment • Continuously assess the effectiveness of protection policies • Support the SOC in improving detection rules • Produce technical reports on protection effectiveness • Ensure continuous updating of security policies