· Monitored and analysed security alerts from SIEM tools, IDS/IPS, and endpoint security solutions to identify potential incidents.· Investigated security incidents, performing initial triage to determine severity and scope, and coordinating response efforts with senior analysts and IT teams.· Utilized threat intelligence to stay updated on emerging threats and enhance detection and response capabilities.· Documented incident details, response actions, and post-incident activities, creating detailed reports for management and stakeholders.

· Conducted extensive penetration tests across multiple environments, interpreting vulnerabilities to proactively identify threats and enhance security posture. · Simulated attacks with industry tools to understand threat actor TTPs, adhering to key regulatory standards [PCI, HIPAA, NIST]. · Successfully implemented countermeasures for a 100% remediation of critical threats, reinforcing defensive postures. · Maintained up-to-date cybersecurity knowledge and produced comprehensive post-assessment reports, offering insights into vulnerabilities, impacts, and mitigation strategies.· Collaborated with compliance and social engineering teams on tabletop exercises and phishing campaigns, fostering integrated threat insights and response.

• Built a virtual cyber range to offer cyber labs/scenarios which require interacting with multiple elements in an environment.• Set up a lab for log monitoring and analysis on Splunk with a tutorial dataset.• Created an active directory lab environment using Windows Server 2019 and Windows Server 2016 as domain controllers and set up a forest. • Added misconfigurations to the AD using Bad Blood.• Attacked the Windows server 2016 domain controller using ms17-010 vulnerability to gain access to the AD, create a new user account and escalate privileges.• Created in-depth documentation of every lab for students’ education.

• Worked with a team of student workers to process applications of student applying to SCI.

• Provided security monitoring and incident response services for multiple clients to protect assets, infrastructure and data using Splunk, QRadar and ArcSight.• Performed cybersecurity risk assessment of the technology infrastructure and provided risk mitigation recommendations.• Experience with National Institute of Standards and Technology (NIST) security controls and cybersecurity framework, Governance, Risk Management, and Compliance security documentation, Risk Management Framework (RMF), and security compliance processes.• Network traffic and firewall security monitoring and management of threats and vulnerabilities using Palo Alto Panorama, Palo Alto Threat Vault, and FireEye Helix.• Advanced Persistent Threat detection, and mitigation of insider threats as well as human social engineering and phishing.• Vulnerability management and documentation for various clients’ assets.

• Developed web applications using Java and SQL.• Performed extensive code review.