• Investigate potential cyber-attacks and intrusion attempts.. Assist DLP team to enforce set rules for end users and quarantine data as needed• Leverage aggregated cyber threat intelligence, log, network flow, and anomaly data for analysis, research and the identification of potential compromise within PE’s infrastructure or applications. • Create detailed incident and analysis reports, and provide concise summaries for management. • Monitored SIEM System consoles (Splunk ES, FireEye Proofpoint, Imperva, ThreatStream, Netscout, Symantec, McAfee ePO, Paloalto WAF logs) for active alerts (network traffic anomalies or malicious activity) and determines priority of response.• Investigate and analyze traffic using Symantec and McAfee DLP Manager for SPI/PII to detect unauthorized data transfers escalate for further review to senior analysts.• Phishing alarm triage and investigate Phish reported emails containing malicious URLs and attachments using various security tools such as Proofpoint inbound/outbound, Proofpoint TAP and take appropriate actions such as block malicious URLs and IPs and submit request to re-categorize malicious URLs.