Performed security incident and event monitoring support, including deep dive data analysis and response.Developed and managed customer security event analysis notifications with thoughtful analysis details, evidence, conclusions, and recommendations.Responded to and managed customer issues and questions regarding security events, including evidence supporting risk identification and recommended risk mitigation, via trouble ticket, email, and phone.Directly managed customer escalations related to detected cyber threat events and subsequent risk.Reviewed threat detection rules and correlations, and made recommendations for improved fidelity.Created SIEM correlation rules and made changes to existing rules.Directly supported, trained and mentored junior and new team members.

Reviewed shift summaries and SOC activity logs, emails, tickets/cases queues and other monitoring tools for complete understanding of previous shift activities and incidents with the goal of maintaining the highest level of customer service by keeping track of the critical customer impacting issues.Provided monitoring and responding to alerts and events within SLAs. Services and systems include but not limited to internal SIEM, DDOS- Distributed Denial of Services Attacks, Firewalls alerts, Splunk SIEM, IDS/IPS for customers.Monitored multiple ticketing systems and queues. Ensure tickets were created and notated within SLAs.Monitored phone queues to answer internal/external/rollover calls. Monitored, escalated, emailed, and triaged DDOS attacks targeted on customers networks. Worked closely with the SOC Tier II and Operational Engineering teams.Escalated issues to SOC Tier II and Operational Engineers as soon as there was a need.Provided process and operational improvement suggestions.

Reviewed shift summaries and SOC activity logs, emails, tickets/cases queues and other monitoring tools for complete understanding of previous shift activities and incidents with the goal of maintaining the highest level of customer service by keeping track of the critical customer impacting issues.Provided monitoring and responding to alerts and events within SLAs. Services and systems include but not limited to internal SIEM, DDOS- Distributed Denial of Services Attacks, Firewalls alerts, Splunk SIEM, IDS/IPS for customers.Monitored multiple ticketing systems and queues. Ensure tickets were created and notated within SLAs.Monitored phone queues to answer internal/external/rollover calls. Monitored, escalated, emailed, and triaged DDOS attacks targeted on customers networks. Worked closely with the SOC Tier II and Operational Engineering teams.Escalated issues to SOC Tier II and Operational Engineers as soon as there was a need.Provided process and operational improvement suggestions.

Assessed client inquiries regarding connectivity, hardware, & configuration issues to resolve problems.Read technical manuals, conferred with users, or conducted computer diagnostics to investigate and resolve problems or to provide technical assistance and support.Installed and upgraded hardware equipment, performed and ensured proper installation of cables, servers, or appropriate software.Configured Dell Remote Access Controller (iDRAC) & Intelligent Platform Management Interface (IPMI). Audited and documented assets, infrastructure, and training.Provided technical support for maintenance tickets for critical network infrastructure.Monitored network system performance to ensure proper operation.Collaborated with others to resolve information technology issues.Resolved Layer 1 connectivity issues.Insured ISO/NIST compliance.