Soc Analyst
Current- Perform log analysis on SIEM (Security Information and Event Management) solutions such as Splunk and IBM QRadar and identify, and investigate security anomalies, notables and offenses on SIEM enterprise tools.
- Analyzed endpoint telemetry data and conducted investigations into suspicious activities using SentinelOne and CrowdStrike Falcon EDR/XDRs.
- Implemented and managed Proofpoint email security solution to defend against phishing, malware, and other email-based threats.
- Created tickets in TheHive and managed and triaged security incidents and service requests using Jira ticketing system.
- Utilized Kali Linux for penetration testing and ethical hacking activities.
- Conduct cybersecurity analysis to determine the legitimacy of files, domains, and emails using open-source intelligence (OSINT) such as VirusTotal, URLScan, WhoIs, CentralOps, Header Analysis, MX Toolbox etc.