SE cs-security-analyst
Universal SOC entry point — Alex
AT · TH · CA details →
IN cs-incident-responder
Full incident lifecycle — triage → containment → forensics
SEV1–SEV4 details →
BL cs-blue-team-analyst
Detection / DFIR orchestrator
detect · hunt · DFIR details →
RE cs-red-teamer
Offensive security operations coordinator
recon · exploit details →
CL cs-cloud-investigator
Cloud incident investigation — misconfig → runtime
CSPM · CWPP details →
SU cs-supply-chain-defender
Software supply-chain defense — SBOM, provenance
SLSA · SBOM details →
TH cs-threat-intel-lead
Intelligence-driven SOC — IOC enrichment, attribution
CTI details →
PU cs-purple-team-lead
Detection validation & gap analysis, tabletop
purple details →
AP cs-appsec-engineer
Runtime + build-time AppSec, PR gate
OWASP · CWE details →
DE cs-devsecops-engineer
Security-in-pipeline — SAST/DAST, artifact integrity
CI/CD details →
CI cs-ciso-advisor
Executive board advisor — posture reports
board details →
SE cs-security-program-manager
Passive lifecycle orchestrator — planning, roadmap
program details →