Security Operation Center ( Soc L1 Analyst )
Current* Safeguarding critical digital assets and data using LogRhythm SIEM.* Monitoring and analyzing security alerts and incidents based on SIEM, EDR and XDR.* Leveraging LogRhythm's features for threat detection and mitigation.* Ensuring a swift response to security incidents.* Conducting regular threat assessments.* Staying current with emerging cybersecurity threats and trends.* Contributing to incident response and resolution.* Monitoring and managing client entities as managed services.* Collecting and escalating events to client entities based on analysis.* Executing IP blocking using SOAR.* Retrieving and managing daily reports per client entity.* Analyzing the history of detected IPs for reputation addresses.* Providing mitigation and recommendations for all actions.* Querying past results for deeper analysis