Keeps up to date on the latest security news and monitors for threats and zero day or other exploits followed by action and communication
Monitors information security related websites (US-CERT, SANS, Internet Storm Center, etc) and other sources to stay up to date on current attacks and trends
Work with DevOps teams to provide Security guidance and feedback
Monitors and works Security Operations ticket queue
Monitors and investigates alerts generated from ResMed s security appliances, cloud services and various technologies
Works with Infrastructure teams and other internal business units as required to promote Secure computing standards and monitoring
Compiles and analyzes data for management reporting and metrics
As an active member of the team, monitor and process response for security events on a 24x7 basis.
Analyzes potential impact of new threats and communicates risks to stakeholders
Assist with incident response as events are escalated, including triage, remediation and documentation.
Investigate and document events to aid incident responders, managers and other SOC team members on security issues and the emergence of new threats.