Professional Summary: 8 Years of Experience in the following areas:•Splunk Enterprise Security (SIEM)
•Investigate incidents take action accordingly into consideration SLA and validate.•Create knowledge base in reflection to incident and notable events•Create daily reports.•Create Dashboards.•Analyze Splunk logs and configured manual notable events in reflection to log findings.Deploy, Manage, Troubleshoot and Monitor FireEye EX, NX, FX, AX & CMS. Deploy,… Show more Professional Summary: 8 Years of Experience in the following areas:•Splunk Enterprise Security (SIEM)
•Investigate incidents take action accordingly into consideration SLA and validate.•Create knowledge base in reflection to incident and notable events•Create daily reports.•Create Dashboards.•Analyze Splunk logs and configured manual notable events in reflection to log findings.Deploy, Manage, Troubleshoot and Monitor FireEye EX, NX, FX, AX & CMS. Deploy, Manage, Troubleshoot and Monitor Following Products • Endpoint Protection from Threat
• Advance Threat Protection (ATP) 
• Mail Security on MS Exchange 
• Endpoint Encryption Solution 
• Data Loss Prevention • Email gateway (Ironport)• Nexthink• Web gateway (Websense) Responsibilities: 
• Responsible for security incidents in Splunk. 
• Perform investigation and closed loop management of security incidents 
• Manage, and close incident tickets with in SLA. 
• Handling malware outbreak incidents. 
• Submit Zero day Malware Samples to AV Vendor in order to create signature. 
• White and Black list external Hardware Devices, Applications for ATM, Domains and senders on Email and Web Gateway Level. 
• Root cause analysis of malware outbreak. 
• Manage IS Control Application. 
• Ensuring the timely completion of administrative functions such as Daily Security Recaps, Daily Activity 
Reports, Incident Reports, logs, etc. 
• Ensures compliance with PCI and ISO/IEC 27002 policies and procedures. Contribution in developing IS 
procedures that will improve and enhance the security. 
• Ensures that all training materials are updated regularly. Staff are trained thoroughly on security Products. Show less

Examines malicious software, such as bots, worms, and trojans to understand the nature of their threat. This task usually involves reverse-engineering.Daily monitoring and maintenance of enterprise data loss prevention (DLP).