• Document the security breaches and measure the damage caused.• Install software like firewalls and essential data encryption programs to safeguard organization’s vital data. • Be up-to-date about the latest security trends.• Prepare documentation about the security breaches and the damage caused. • Suggest security enhancement methods to the organization management or the IT staff. • Implementing both internal and external security audits.• Analyze the security issues thoroughly to identify the root cause. • To verify whether the third-party vendors meet security requirements.• Providing guidance to amateur computer users when they want to know about security procedures.• Research about the newest security technology that best suits to safeguard your organization. • They create a disaster recovery plan, which is an essential procedure to be followed by every employee during an emergency. The disaster recovery plan includes transferring data to other locations and restoring IT functioning immediately after a disaster

*Providing Security monitoring, threat/risk analysis, and rapid response to security alerts and events in a 24/7 SOC environment* Evaluate, modify and tune the SIEM rules to adjust the specifications of alerts and incidents* Practical insight to Creating Rules, Active channel, Dashboard, Filters, Reports, Queries etc*Creating Bugs on Use cases for end devices.*Proficient in Ticketing Tools ServiceNow and ITSM as we used to create tickets and incidents daily to escalate to other teams.*Device and Health Monitoring involves troubleshooting network connectivity problems concerning managed security devices, often time working with NOC Team * Investigating and creating cases for the security threats and forwarding it to Onsite SOC team for further investigation and action* Following up the incidents as per SLA.* Research, analyze and understand log sources utilized for the purpose of security monitoring, particularly security and networking devices (such as firewalls, routers, anti-virus products, proxies, and operating systems).*Preparing Daily, Weekly and Monthly Reports.*Checking singleton Events and finding the reasons for not correlating with other alerts.*Analyzing the Incidents on EDR Sentinel One* Analysing the bot traffic on Palo alto* Using Jira and Service now portals to raise necessary actions on compromised Hosts.*Creating SOPs for newly created Use cases.* Malware Analysis *Phishing mail analysis