Security analysts tend to work in two modes: reactive mode and proactive mode. Situational awareness, situational awareness, or situational awareness is helpful, says Jim Treinen. The ideal scenario is to intercept attackers before they cause damage or steal information, he says. An analyst can use a combination of tools and clues pulled from monitoring the network to determine which parts of the network should focus on first. An experienced senior analyst whose interest in an activity is piqued might be able to yield some fruit.”]
Source: https://www.darkreading.com/careers-and-people/a-day-in-the-life-of-a-security-analyst