• Walk us through your end-to-end process for evaluating security software. • Detail the specific steps and stakeholders involved in a recent SIEM or SecOps purchase. • Describe the challenges you face when comparing different security vendors. • Provide feedback on what makes a vendor evaluation successful for your organization.

• Monitor and respond to security alerts from Microsoft Sentinel, Microsoft Defender XDR, ZeroFox, and Entra ID related activity • Perform initial triage of alerts to determine severity, scope, and whether activity is malicious or a false positive • Conduct basic investigations using available telemetry from Azure, Endpoint, Office, etc • Utilize Kusto Query Language (KQL) to query logs and validate suspicious activity when required • Escalate validated or high-risk alerts to Tier 2 analysts with clear documentation, supporting evidence, and timelines • Follow established SOC playbooks and SOP during alert handling and investigations • Document all investigations and actions taken in the case management system (ServiceNow) with accuracy and clarity • Track and identify recurring alerts or patterns in the environment and report findings to support detection tuning efforts • Support incident response efforts by collecting relevant artifacts and assisting Tier 2 in identifying potential root cause • Provide feedback on SOC processes, playbooks, and workflows to improve operational efficiency • Assist with projects and ongoing efforts to create documentation, support automation initiatives, and review legacy SOC processes • Ensure timely response and adherence to SLAs for alert acknowledgment, triage, and escalation • Assist Compliance teams with audit requests by retrieving and organizing relevant security log data from Sentinel

• Overseeing and managing the organization’s cyber incident response and operational security activities • Directing response strategies, guiding investigations, and coordinating remediation efforts • Collaborating with cross-functional teams to protect the organization from cyber threats • Developing and implementing effective incident response plans

• Responsible for ensuring client satisfaction and efficient execution of engagement plans • Serve as a coach and advisor to team members • Focus on IT controls, security, and compliance across SOC 2 and SOC 1 engagements • Evaluate, test, and document controls related to security, availability, processing integrity, and key business processes • Build strong client relationships through a deep understanding of client systems, technology environments, and compliance requirements