Security Operations Role

Job Responsibilities included

• Triaging and responding to alerts
• Managing phishing mailbox
• Sandboxing malware as needed
• Following escalation protocols when needed

Questions asked to me

• Explain TCP vs UDP

  • A use case for each

• Explain the difference between a vulnerability, risk and threat.

  • Explain how they are tied together

• How would you utilize Threat Intel feeds?

Technical Exercise

You get forwarded [the following email] to your phishing reporting mailbox, how do you determine this is either a phishing email or a legitimate email?

Walk through your analysis process.

• i.e Scrutinizing links, attachments, language of the email, etc.