Our personas
In a typical medium sized org there are 3 personas we interact with. Large enterprises are more complex and varied.
| Role | Tier 1 SOC Analyst | SOC Manager | CISO |
|---|---|---|---|
| What they do | Investigate and triage alerts | Manage the SOC. Cares about MTTR, and SOC efficiency | Manage the entire security org. Strategic, gets money, thinks about the future |
| What they want | Get a more interesting security job in a year (advance to tier 2/3) | Triage and contain every alert quickly. Have a smoothly running SOC | Avoid major breaches, identify the next big security trend |
| What they fear | Miss a breach! | Miss a breach! | Get rotated out in 4 years |
| Why Legion | No more copy pasting IPs into VirusTotal! | Get through my backlog! | Introduce AI powered efficiencies! |