SOC Use Case Developer (Splunk)

SOC - Use Case Developer

Over 4.6 years of experience in Information Technology as Security Engineer.Security Event Monitoring & Response - Perform day to day maintenance, administration and tuning of the Company's SIEM (Security Information and Event Management) and NIDS (Network-based Intrusion Detection) solutions for the cloud. Investigate and respond to identified security events and incidents in the cloud environment (SAP HANA Enterprise Cloud, and Ariba). Analyze where security breaches may occur or have occurred, and repair or strengthen systems against such breaches, related to the systems and networks used by the company and client. Defining Security architecture (both Infrastructure and Applications), tasks and procedures related to the Company's technology environment in the public cloud. SOP Processing Log Analysis (Events, Trends) Alert Detection and filtering False Positives Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources Coordinate cross-functional team meetings to re mediate previously identified security risks and close out pending action plans Develop, deploy and support information security systems and solutions Participate in 24x7 Information Security Response team

Provide security engineering, integration services, technical assessments, and solutions. Real Time Log monitoring from different Network devices and Servers. Performing Real-Time Monitoring, Investigation, Analysis. Managing the ArcSight Express and Logger Appliances. Device on boarding and log collection status conf irmation. Collection, analyzing and preserving the evidence related to incident. Malware analysis, logs analysis, SIEM logs analysis utilizing Enterprise Products. Performing trend analysis and suggest improvement to security aspect. Writing reports on incidents and delivers them to Business and other stakeholder. Creating of rules, Active List, Dashboard, Active channels based on customer requirements. Creation of reports, queries and filter for the events that are generated in ArcSight console on the basis of severity and priority of the events. Ensure application availability and SLA adherence. To be able to configure manage event feed in event aggregation and correlation systems. Creating daily log reports for different customers using Tableau, Excel.

o Worked on OSI Model.o End device log monitoring with Arcsight.o Worked on different type of cyber-attacks.o Worked on different types of Protocol.o WORK ON TOOLS : Having working knowledge of Tableau(Tool used for reporting purpose).o Analysing the security advisories for taking preventing measure for vulnerabilities and malwares.