Security Operations Center (Soc) Analyst
Current-Monitored and analyzed SIEM alerts through Splunk and IBM QRadar to identify security anomalies for investigation and remediation and provided recommendations to the technical teams.-Conducted analysis to determine the legitimacy of files, domains, and emails using online resources such as VirusTotal, AnyRun, and MX Toolbox.-Analyzed Packet Capture (PCAP) files, examined the details of the infected hosts, and wrote Indicators of Compromise (IOC) in executive summary reports.-Diagnosed common cyber-attack types and created examples using tools such as Setoolkit in Kali Linux computer operating systems.-Reviewed existing policies and guidance to ensure compliance with the National Institute of Standards and Technology (NIST) Risk Framework.
Aug 2023 - Present
