• Monitoring Security Information Event Management (SIEM) toolsSplunk and Exabeam and searching for security gaps.• Monitoring Endpoint Detection & Response (Next-gen antivirus,EDR, and XDR) for active threats and unusual user behavior• Creating Detailed and executive reports about security incidents.• Consulting the appropriate teams for infrastructure hardening,based on log research and customer needs..• Supporting the IT team to restore business operations to normalstate and prevent the new incidents