SOC Operating Models

So my organization is going under a lot of change currently and I have the opportunity to redesign how the SOC operates at an organization level. I want to hear from your guys experience what has worked or not worked.

For context, we are 400ish employees operating critical infrastructure. Our current model is junior, mid-tier and senior analysts. The junior and mid tier are honestly very similar both doing initial triage of siem alerts, vuln management, and threat hunting. Senior …

change context critical critical infrastructure current cybersecurity employees experience infrastructure lot opportunity organization redesign soc under