#Implementation Of Arcsight ESM with High Availability.#Finetuning of #DAM solution and integration of Databases into #Mcafee#DatabaseActivityMonitoring.Incident Management Integration of Devices with ArcSight for log managementRule/Report creation and finetuning in ArcSight and McAfee #DAMDeveloping Parsers #Regex for ArcSight Connectors

o Working in the Security operations center as a Senior Security Analyst in the Device Management Team.o Performing as a Shift Lead to guide and mentor the junior resources.o Working as a SME for Qradar and will working on finetuning false positives and Creating Rules and Reports o Working in the integration of Devices with Qradar/Imperva DAM/ Mcafee EPOo Good Experience in Threat management using the McAfee endpoint protection and Falcon Crowdstrike.o Working on Security Orchestration and Automated Response (SOAR) platform and updating Demisto playbooks and resolving the cases created in the same.

 Guiding & managing a team of 15 members and reporting performance to my supervisor. Performing second level analysis and correlating the events to find the critical incident and preparing documents on escalation procedure with defined matrix and report template development. Preparing Monthly & Weekly Presentations to present to the Top management on the events/attacks identified. Guiding & Supporting the analysis and investigation of logs for the L1 resources using SIEM tools Envision, Security Analytics, Arcsight, ISS RealSecure and reporting any security breaches, attacks, malicious activities, unauthorized accesses . Working on Security related tickets and resolving them within the defined SLA. Log Analysis with IT regulatory compliance.