● Analyzed intrusion detection system alerts using Splunk, proactively troubleshooting an average of 20 tickets per week. Leveraged open-source intelligence to pinpoint IP address locations and detect malicious IP activity, crucially supporting Watch Officers' daily block/unblock requests. ● Conducted in-depth investigations into reported spam and phishing emails, swiftly identifying, and mitigating potential threats to enhance email security.● Managed Active Directory (AD) to disable lost and stolen devices, as well as unauthorized VPN-connected accounts and devices, ensuring the security of network resources and data.● Monitored the team inbox on an hourly basis, promptly identifying and addressing actionable tasks to maintain a proactive security posture.● Provided efficient customer support through platforms such as Cisco Jabber and Microsoft Teams, addressing inquiries and technical issues to enhance user experience and satisfaction.● Generated daily tickets that served as valuable references for the SOC team, facilitating organized incident management and tracking of security-related tasks.