Working in the Security Operation Center (24x7), monitoring of SOC events, detecting and preventing Intrusion attempts.Good understanding of security solutions like Firewalls (Palo Alto, checkpoint, Fortinet) DLP, Anti-virus, IPS, Email Security etc.Responding to various security alerts for various clients and scanning for vulnerabilities using tools like Qualys.Monitoring real-time events using SEIM tools like IBM Q Radar, Sumo Logic, Splunk, ArcSight, Azure Sentinel, Rapid 7Handling Alerts from multiple Security Log sources such as Proxy, Anti-Virus and EDR. Deep dive Investigation through Falcon EDR.Monitoring, analyzing and responding to infrastructure threats and vulnerabilities. Phishing and Spam Email Analysis.Investigate the security logs, mitigation strategies and responsible for preparing generic security incident reports.Having excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cyber security), various operating systems (Windows/UNIX), and web technologies (focusing on Internet security).Monitoring packet level data Intrusion Detection and Intrusion Prevention and Network Security Products (IDS/IPS, firewalls, etc.) Host Security Products (HIPS, AV, scanners, etc.).Responsible to preparing the Root Cause Analysis (RCA) reports based on the analysis. Analyzing daily, weekly and monthly reports.Creating case for the suspicious issue and forwarding it to Onsite SOC team for further investigation.Website Anti-Malware and Defacement monitoring and real-time alerting based on anomalies detected.Act as first level support for all Security Issues.Monitor SIEM alerts, analyze events in SIEM and raise Security incidents in Ticketing tool Manage Engine.Experience in Monitoring & Investigating the incoming Events in the MacAfee DLP. Monitoring security systems and networks for anomalies.