Refine existing rules and propose new use cases based on investigations and recurring patterns; enrich cases with threat intelligence (IOCs and TTPs) and incorporate those learnings into future detections and playbooks; Contribute and evolve response playbooks for major incident types (account compromise, endpoint malware, SaaS abuse, suspicious network activity), participate in post-incident reviews with root-cause analyses and practitioner-level technical narratives, and recommend prioritized, practical prevention and mitigation improvements. HERE'S MORE OF THE NITTY-GRITTY: Our Security Operations Analyst II possesses the following experience, skills and abilities and be able to explain and demonstrate that they can perform the essential functions of the job, with or without reasonable accommodation, using some other combination of knowledge, skills, and abilities: Bachelor's Degree in the field of Computer Science, technology, or a related area with a master's degree preferred.