• Experienced in providing security fundamentals and preventing antivirus/ Malware, Spywares, Worms, Trojans, OS attack, Reporting, auditing, alerting, Policy creation and management in client environment.• Working on Alerts and Incidents triggered from various security tools as part of Incident Response Cycle. • Install and configured Symantec endpoint protection manager & create the policies.• Creating client packages to suit different client environment eg: windows 32 bit, 64 bit, Linux, Mac O.S.• Identify critical flaws in applications and systems that cyber attackers could exploit. • Conduct vulnerability assessments for networks, applications and operating systems. Conduct network security audits and scanning on a predetermined basis. • Performing incident handling and documentation within the incident response cycle (detection, triage , analysis, mitigation, reporting and documentation)• Raising tickets with vendors and coordinating with them to resolve the issue.• Monitoring phishing folder on daily basis and investigating phishing activity reported by user.• Daily, weekly & Monthly security metrics & dashboard published.• Strong Experience in Monitoring & Investigating the incoming Events in the Splunk.• Expertise in defining resources like Rules, Filters, Dashboards, Data Monitors, Active Channels in Splunk.• Performs real-time monitoring, security incident handling and deep investigation of security events, reporting and escalations of security events from multiple log sources. • Responsible for run and maintenance of FireEye HX antivirus solution.• Responsible for run and maintenance of CrowdStrike Falcon Host antivirus.• Creating on-demand & daily reports for Global customers using Splunk, reviewing raw log files, data correlation, and analysis (i.e. firewall, network flow, IDS, system logs).• In depth analysis and understanding of Cyber breach through the analysis and correlating of security logs.• Create different kind of policy in SEPM console, FireEye Console and CrowdStrike as per requirement.• Design and configure Symantec endpoint protection setup, Exception creation and management in client environment, client management.• Create the firewall policy to allow and block the website, Application and device control, reporting threats recommending security improvement in client’s environment from Symantec Endpoint Protection manager.• Use Service Now ticketing tool to handle the incident.