• Logs Analysis, Email Phishing and Website White listing.• SIEM logs, Firewall logs, Active Directory logs.• Splunk Enterprise Security basic knowledge.• Continuous monitoring, analyzing the security alerts and event information for all approved security feeds to include investigation of incidents using system logs, event correlation between IDS/IPS, firewall and other means of detection.• Investigating and positively identifying malicious activities that are detected by security devices• Working on false positive case.• Knowledge on SIEM tool (Splunk)• Working on incident response team.