*Performing Real-Time Monitoring, Investigation, Analysis, Reporting, and Escalations of security events from Multiple log sources. *Raising true positive incidents to the respective team for further action. *Following end-to-end Incident Investigation and Incident Response process, ensuring closing the investigation within the committed SLA period. *Determine the scope of a security incident and its potential impact to the Client network and recommend steps to handle the security incident with all information and supporting evidence of security events. *Provide detailed remediation recommendations to customers for the incidents within the committed SLA period.*Investigate malicious phishing emails, domains, and IPs using Open- Source tools and recommend proper blocking based on analysis Build daily, weekly, and monthly reports as per clients' requirements. *Attending Daily and weekly meetings to discuss alerts raised and mitigation. *Working in a 24x7 Security Operations center.

*Monitoring Security alerts generated by SIEM. *Perform investigations in response to the security alert. *Analysis of triggered alerts (usually following a Runbook)*Determine how the security incident occurred. *Escalating critical alerts to L2 analysts for further analysis. *Participating in weekly SOC meetings to discuss on raised incidents.