- Reporting for ALL Security Incident Event Management (SIEM), User and Entity Behaviour Analytics (UEBA) and Cloud Access Security Broker (CASB) alarms.- Following case development and building of and maintenance of escalation work flows when necessary- Provide tuning recommendations to the Client Service Manager- Presentation of reports and advanced analytics findings when required- Attendance at all routine client meetings and prep-meetings for EMEA SIEM Clients- Overall Responsibility for any non-engineering client requests (eg. ad-hoc investigations) for SIEM Clients- Assist in identifying opportunities for new alarms based on emerging threats and bringing to the team- Maintenance of SIEM documentation (i.e. alarm workflows, escalation procedures, team details, client knowledge base)

● Create and track incidents and requests with an integrated ServiceNow(SNOW) ticketing system.● Follow detailed operational processes and procedures to appropriatelyanalyze, escalate, and assist in the remediation of security incidents.● Liaise with the Company’s Security Operation Center to respond to emergingincidents in a timely manner.● Perform analysis of log files of Firewall, IPS, IDS, Server, and Proxy via Splunk● Analyze PCAP files for Malware analysis and find details of the infected hostsand write IOC on executive summary reports.● Identify, track, and investigate high-priority threat campaigns, maliciousactors with the interest, capability, and TTPs (Techniques, Tactics, andProcedures).● Analyze and review escalated cases until closure.● Conduct core information security activities: Security Information and EventManagement (SIEM), Malware Detection, Vulnerability Management,Education & Awareness, Open-Source Intelligence (OSINT), NetworkMonitoring and Log Analysis.● Monitor and analyze Security Information and Event Management (SIEM)alerts through Splunk and identify security incidents for remediation andinvestigation.● Document all activities during an incident and provide management withstatus updates during the life cycle of the incident.● Provide information regarding intrusion events, security incidents, and otherthreat indications and warning information to the client.

Clever AI Technologies is a LegalTech startup focused on engineering human rights practices to tailor and expand tech solutions for human rights practice.- Worked on high-impact python projects, e.g., AI-powered document drafting, automated expert report systems, Lawyer-Client Matching Systems, and Deep document search and validation systems.- Handled programming tasks for and maintained three websites.- Developed a marketing lead NoSQL/MySQL databases, collecting, categorizing, and filtering leads from various stakeholders, i.e., WWW, social media channels, or newsletters.