The roles and tasks of people working in the SOC are clearly defined. The first line of defense in SOC includes Tier 1 Alert Analysts who constantly monitor alerts and events, gathering relevant data and context. They provide this information to the Tier 2 Incident Responder, who conducts thorough analysis using the collected data to determine whether critical systems have been compromised and offers guidance on remediation measures. The team is further enhanced by a Tier 3 Subject Matter Expert (SME) or Hunter, who is an analyst with extensive expertise on networks, endpoints, threat intelligence, forensics and reverse engineering. Their job is to detect threats on the network before an actual attack occurs. The SOC manager leads the team and ensures that the hunters have all the resources they need to effectively defend the organizations that entrust us with their security.