Working as a Information security analyst

・Worked as a Tier 2 Security Engineer/ System analyst and support engineer

・Worked as a Tier 2 Security analyst in Next generation Security operations centerSecurity operations center・Managing Splunk SIEM and Demisto XSOAR deployed on the Microsoft Azure platform.・Create and fine-tune detection rules to detect intrusion or insider malicious activity using different sources such as EDR, NIDS, AV, FW, Windows events, etc・Detect ＆Responding to all High,Critical security incidents with end to end management・Integrated devices/services like Cisco Stealth-Watch, AWS Guard-Duty, TrendMicro Apex-One, Cybereason, Tipping-point, Zscaler, PaloAlto, etc. with Splunk or Demisto based on the requirement.・Handling escalations and issues in security technologies/tools globally and be part of the global SOC L3/Experts – Example Areas: Threat Hunting, Forensic Analysis, IPS, EDR, DLP, etc.・Contribution to the risk detection management approach, consistent with the ATT&CK MITRE Matrix approach and other industry-standard relevant approaches・Working as part of a virtual matrix management team, reporting to several people including business line managers, solution owners, and project leads.・Contributing to customers’ security architectures, designing new solutions of significant size and complexity.・Managing the work of other subject matter experts contributing to the design and implementation.