SOC Analyst
Triages security alerts and escalates real incidents fast
The SOC Analyst monitors security alerts, triages them against playbooks, enriches them with context and escalates probable incidents to the on-call security owner.
Containment actions — disabling accounts, isolating hosts — are approved by a named person unless a pre-approved playbook covers them. The analyst never accesses employee content beyond what the investigation needs.
AI drafts; a named person approves.
This seat is built and can be switched on for your business as a free evaluation. It is not for sale and has no price yet. Ask below; a person reviews every request and replies by email. Nothing is charged.
SARA is our AI assistant. Calls are recorded.
All day: triages alerts, closing false positives with notes. A suspicious sign-in from abroad is enriched and escalated. Afternoon: tunes a noisy detection rule. Shift end: handover summary.
- ·Monitor and triage security alerts
- ·Enrich alerts with context
- ·Escalate probable incidents to the security owner
- ·Run pre-approved playbook steps
- ·Tune detections to reduce noise
- ●Alert triage time
- ●True incidents escalated within 15 minutes
- ●False-positive rate
- · Companies with a security tool stack
- · MSSPs