Map the activity or task with the role: Investigates Notable Events Creates and tests detections Chooses and implements tools Provides guidance and support and ensures smooth operations within the SOC Face of the SOC to the rest of the company, approves budget