Monitor security events using SIEM tools (Splunk, QRadar) and analyze logs from various sources to identify anomalies and potential threats.Lead incident response processes for detected security breaches, including detection, containment, eradication, and recovery.Perform in-depth analysis of phishing attacks, malware infections, and network intrusions to develop comprehensive post-incident reports.Conduct root cause analysis and propose long-term mitigation solutions to reduce the likelihood of recurrence.Collaborate with the threat intelligence team to correlate incidents with known threats and emerging risks.Develop and maintain playbooks and runbooks for incident response procedures, ensuring swift and effective handling of future incidents.

Assisted in daily security monitoring activities, including threat detection, event correlation, and incident triage.Helped manage and improve the company’s vulnerability management program by regularly conducting vulnerability scans and coordinating remediation efforts.Supported forensic investigations by collecting evidence, preserving data integrity, and preparing technical reports.Worked closely with IT and network teams to implement network security controls and firewall policies.Participated in 24/7 on-call rotation for critical security incident management.

Provided technical support to users by troubleshooting software, hardware, and network issues.Managed user accounts and access controls within the organization, ensuring appropriate security measures were in place.Assisted in routine maintenance of systems, including patch management and updates.