What does a SOC (Security Operations Center) analyst primarily do?
- A.Develops new software applications, since a SOC analyst role is normally the final step in a security career
- B.Monitors security alerts, investigates incidents, and responds to threats
- C.Manages human resources
- D.Designs network infrastructure; a security architect is responsible for daily alert triage in the SOC
Why B is correct
A SOC analyst monitors an organization's security posture by reviewing alerts from security tools (SIEM, IDS, EDR), investigating potential incidents, escalating confirmed threats, and performing initial response actions. It is one of the most common entry-level cybersecurity roles and provides broad exposure to security operations.
Know someone studying for Security Fundamentals? Send them this one.