• Led investigations on endpoint devices via FireEye HX (Endpoint Detection & Response) Solution.• Acquired and analyzed triages when necessary, to gain insight on the incidents on FireEye HX.• Handled the offenses generated by IBM QRadar (SIEM Security Information and Event Management) .• Analyzed logs by Splunk and QRadar.• Monitored networks by IBM QRadar to detect abnormal activity.• Responded phishing email campaign and led malware analysis.• Created tickets for escalation to IR/Engineering when necessary, using Resilient (Ticketing System).• Identified and prioritized vulnerabilities in computer systems, network infrastructure, and applications.• Run Nessus to report vulnerabilities for the fix by use of analysis.• Analyzed PCAP files with Wireshark to find out IOCs and infected hosts.• Collaborated with different teams to follow up on user requests.• Worked independently with a minimum required supervision to perform all necessary job duties.• Identified security issues for remediation and investigated events and incidents.• Leveraged understanding of risk management frameworks and NIST security standards.• Prepared briefings and detail-oriented reports of analysis methodology and results