Security Specialist-Ir Lead

Handles security incidents escalated from L1 SOC using Security Incident Response life cycle (preparation, detection and analysis, containment, eradication and recovery, post-incident activity).
Monitor L2 escalation queues.
Investigates, resolves standard level incidents using various security event sources (FW, IDS, PROXY, AD etc.).
Investigations into non-standard incidents and execution of standard scenarios.
Provide dashboard and data related to Incidents/Offenses for governance reports.
Escalates to L3 if investigations uncover unusual or atypical situations.
Works directly with L1s for incident response and improves existing documentation of work instructions.
Checks incidents for quality and improvement.
Reviews and updates existing use cases and work instructions.
Keeps accurate incident records.
Provides incident information to IR leads and coordinators for reporting.
Collaborates with other security teams in IBM Security Services.
Participates in, or works directly on additional projects, assignments or initiatives as assigned.