Security Operations

Security Operations (SecOps) encompasses the people, processes, and technologies that detect, analyse, and respond to security threats in real time. The Security Operations Center (SOC) is the nerve centre of an organisation's cyber defence.

---

The Security Operations Center (SOC)

A SOC is a team of security professionals who monitor and defend against threats 24/7:

SOC Roles

Role	Responsibility
SOC Analyst (Tier 1)	Triage alerts, initial investigation, escalate if needed
SOC Analyst (Tier 2)	Deep-dive investigation, correlate events, determine impact
SOC Analyst (Tier 3)	Advanced threat hunting, malware analysis, forensics
SOC Manager	Oversee operations, manage team, report to leadership
Threat Intelligence Analyst	Research emerging threats, provide context to SOC
Incident Responder	Lead incident containment and remediation

SOC Metrics