Serve as Tier 2 Insider Threat analyst/SOC Analyst. Develop processes and procedures to improve incident response times, analysis of incidents, and overall SOC functions. Perform incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts. Document all activities during an incident and providing leadership with status updates during the life cycle of the incident. Ability to establish and maintain effective working relationships across cross-functional teams and diverse individuals at any level to build strategic relationships. Expertise to analyze and correlate events using Splunk. Extracted complex fields from different types of log files using regular expressions. Install, patch, and maintain the Splunk Enterprise application using the approved Change Management Process. Acknowledge, troubleshoot, and document change activity while providing detailed information to management and team members