TLDR InfoSec · MISCELLANEOUS

WHAT DOES A SOC ANALYST DO?

tcm-sec.com6 min read

Summary from the TLDR InfoSec newsletter

This blog post provides an overview of the role of a SOC analyst. The main functions of a SOC analyst are security monitoring, incident detection, incident analysis, and incident response. Most SOCs are organized into tiers, with tier 1 analysts doing basic triage of alerts and higher tiered analysts doing more senior incident response and threat hunting.