Primarily responding to daily low level and mid-level threats, such as suspicious logins, using the SOC tools and logs then forming a hypothesis for the event and informing desktop support, security team, and security engineers of my findings. Aiding security team in Threat Intelligence, Analysis, and Incident Response. Tools Used: EDR (Cortex XDR), Azure AD, Active Directory, Microsoft Defender for Cloud Apps, Microsoft Security, andMicrosoft Compliance.