Ask HN: Security Analyst Workflows

I am a student of cyber security working toward my CCNA and CISSP certificates. I am very interested in learning more about the average security analyst workflow, whether that be in an NOC, SOC, or just in a normal software developer / sysop toolkit. Specifically, I am interested in what you use in your daily jobs to track, audit, and resolve security issues.

Background: I have read about Security Onion, Metasploitable, and Kali Linux, which give a view into the tools and exploits that exist. That said, I am looking to deepen that knowledge by seeing what people do, and use, in practice.