- Analyses events generated from IDS/IPS, SIEM, EDR/MDR/XDR, Log-Based Alerts as well hands on tools Like Nessus, Qualys, Sentinel One, Perch, Bit Defender, Microsoft defender for business.- Conducted regular vulnerability assessments and active threat hunting to identify and mitigate potential potenial security risks.- Guided clients through the security incident response process, from preparation to recovery.- Spearheaded the development and implementation of comprehensive… Show more - Analyses events generated from IDS/IPS, SIEM, EDR/MDR/XDR, Log-Based Alerts as well hands on tools Like Nessus, Qualys, Sentinel One, Perch, Bit Defender, Microsoft defender for business.- Conducted regular vulnerability assessments and active threat hunting to identify and mitigate potential potenial security risks.- Guided clients through the security incident response process, from preparation to recovery.- Spearheaded the development and implementation of comprehensive incident response plans, enabling swift and effective response to cyber threats and minimizing potential damage.- Oversaw and maintained security systems such as firewalls, intrusion detection and prevention systems,and antivirus software guaranteeing optimal performance and safeguarding against cyber threats.- Seamlessly working with various teams, including NOC, Infosec and CRU (Incident Response Unit). These effortswere aimed at conducting thorough investigations into affected endpoints, employing strategies for network isolation.- The synergies with the CRU team was to be instrument in updating Indicators of Compromise and Indicators of Attack (IOAs), enhancing the overall response and mitigation capabilities.- Escalating to Incident Response team for deeper dig and find the RCA. Show less

Working- Monitored Cybersecurity Systems, network and Endpoints for securityBreaches and responding to incidents.- Assisted with the analysis of events generated from IDS, Log-Basedalerts, SIEM Alerting, EDR Tool- Conducting assessments to identify vulnerabilities and threats- Conducted threat hunting exercise to proactively identify and remediate potentials threats in customer enviornment- Worked on Events like Ransomware, Lock bit, Mimi Katz, Dropper,Viruses, Tozen’s, and… Show more Working- Monitored Cybersecurity Systems, network and Endpoints for securityBreaches and responding to incidents.- Assisted with the analysis of events generated from IDS, Log-Basedalerts, SIEM Alerting, EDR Tool- Conducting assessments to identify vulnerabilities and threats- Conducted threat hunting exercise to proactively identify and remediate potentials threats in customer enviornment- Worked on Events like Ransomware, Lock bit, Mimi Katz, Dropper,Viruses, Tozen’s, and daily emerging new threats.- Assisted with SIEM Rule modification, notification pathways and otherconfiguration management- Demostrated ability to collaborate effectively with cross-functionalteam, and collaborative approach security Management.Skills:- Conducted regular meetings and communication with partner to provideupdate on security status.- Strong ability to understand partners unique security needs and developtailored solutions that align with industry standards and best practices.- Organization skills- Effective communication and relationship-building- Have ability to work in fast paced dynamic enviornment- Have ability to work independently on projects and processes withgeneral supervisionBitdefender Endpoint Protection · Hayabusa by Yamato security · Log Analysis · Chainsaw · MITRE framework · Sentinelone · Event tracker · EDR · Security Information and Event Management (SIEM) · Show less