Cyber incident investigation
Using synthetic firewall, endpoint and network logs, build an incident timeline. Identify suspicious events, assess likely impact and propose defensive actions with clear evidence.
The Level 1 role analyzes several security data sources, investigates events and develops defensive measures.
Source posting