Security Operations Center Analyst
CurrentConduct proactive SLA based monitoring, investigation, alerting and mitigation of security incidents using Splunk.Deeper analysis of the Splunk alerts using EDR and NSM tools and raising Tickets using ServiceNow for the True-Positive alerts.Monitoring of Mailboxes and taking the necessary actions for any reported Phishing attempts.Assist in the fine-tuning of different use cases.Quick response to the ad hoc requests from different clients.Performing regular IOC Hunts for different Clients to detect any undetected threats or infiltrations in their environment.Presentedinteresting tickets and alert scenarios in front of the Different account leads in Bi-weekly calls.Assisting the new team members to the processes and procedures of the Team, sharing knowledge about the different tools used
