• Monitor & Analyze security incidents using various tools such as SIEM, NIDS, EDR, WAF & TI platforms. • Experience with GCP and AWS including services like AWS CloudWatch, Analyzing CloudTrail logs.• Stay updated with the latest cybersecurity trends, attack vectors, and vulnerabilities to enhance overall threat awareness.• Participate in security awareness training for employees to promote a culture of cybersecurity awareness within the organization.•Assist in the analysis of security incidents and conduct initial investigations to determine the scope and severity of potential threats.• Email analysis and assessment by using KnowBe4 and Trend Micro•Work collaboratively with senior analysts to escalate and respond to security incidents in a timely manner.

• Continuous monitoring and interpretation of threats using the IDS and SIEM• Investigate malicious phishing emails, domains and IPs using Open Source tools and recommend proper blocking based on analysis.• Worked in a 24x7 Security Operations Centre▪ Skilfully investigated malicious phishing emails, domains, and IPs through OSINT, analysing patterns & behaviours.▪Maintained a dynamic edge by staying current with the latest cyber threats, attack techniques, & industry best practices.▪ Demonstrated adeptness in a wide array of cybersecurity domains, including ISO27001, OWASP, AppSec, IAM, Cyber Kill Chain, Dark Web, Vulnerabilities, NIST, CIS Critical Controls, and PCI DSS.▪Engaged in monitoring & thorough analysis of security events, identifying potential intrusions & malicious activities• Search firewall, email, web or DNS logs to identify and mitigate intrusion attempts.• Deep dive analysis of triggered alerts using SIEM and other analysis tools• Rescan mitigated systems for further infections. If none, commission systems back to the network.• Investigating incidents, remediation, tracking, and follow-up for incident closure with concerned teams, stakeholders• Observe security solutions; SIEMs, firewall appliances, intrusion prevention systems, data loss prevention systems, analysis tools, log aggregation tools

• Monitor QRadar Notifications and error messages.• Review and interpret system monitoring dashboards.• Verify QRadar processes and services.• Conduct log analysis using SIEM.• Conduct analysis, the discovery of IT vulnerabilities, monitoring for cyber intrusions, troubleshoot and response to security incidents detected and other security applications.• Monitoring and analysis of security events to determine intrusion and malicious events.• Work as part of a growing team, to disseminate information to others – which makes us continually improve• Technical analysis of network activity, monitors and evaluates network flow• Monitor QRadar performance.• Use apps and tools for monitoring (e.g., QDI)• Check system maintenance and health of appliances.• Create, manage and delete user accounts for multiple systems in accordance with existing on-boarding and off-boarding procedures