Investigated alerts generated from various platforms such as: MIMECAST, Carbon Black App Control, Office 365, Zscaler, InsightIDR, Snyk, and CrowdStrikeConducted incident investigations on SIEM toolsPerformed threat hunting on customer networks to detect and isolate threats and provide recommendations to customersWorked to ensure processes have proper run books established to ensure off hours support for VSOC Provided proactive security investigation of security threats, countermeasures, security tools and Cloud Security and SaaS technologies Helped develop security processes, procedures and runbooksPerformed daily validation checks on the MLMIC security platforms and servicesManaged the lifecycle of all security events and incidents by documenting, escalating, or remediating the security event.Worked within Jira ticket management system to ensure all events are reviewed and closed outMonitored security with one or more SIEM technologies, incident detection and response, and intrusion prevention technologiesCreated rules and alerts in SIEM to identify threats and anomalous activityDeployed SIEM and End-Point agents on end-point hosts and serversPerformed follow-up on third-party due diligence questionnaires and BEC eventsHelped with deployment of new technologies and security platforms to bolster MLMIC’S security posture Reviewed threat intelligence reports, feeds and alertsWorked with IT department to ensure patching and vulnerabilities are mitigated in accordance with established SLA’s

Performed hands-on source code review as well as static and dynamic analysis, auditing results, and offering plans for vulnerability remediation and/or mitigation.Worked with development and project teams to promote and ensure the use of secure coding principles.Utilized knowledge and understanding of application architecture, design, and development and secure coding principles and emerging standards to identify findings and clearly communicate risks and possible remediation.Provided guidance to developers on recommended controls and countermeasures and interacts with stakeholders.