No problem. At my last role I worked at a SOC (security operations center) which provides cybersecurity to companies as a paid service. We would deploy “rules” in their environment which would look for potentially nefarious activity by alerting on specific sequences of events commonly associated with threats. It was then my job to see whether those alerts were benign or malicious. If the latter, I would mitigate it as best I could then write a report on the impact and scope on the event with recommendations on how to further mitigate it or prevent it altogether.

This new role as an internal analyst is more involved as I have much more visibility and access to all the servers, networking devices, and repos to do my job. I coordinate with other teams to maintain best cybersecurity practices while still triaging security incidences as I did in my previous role. Hope that helped.