• Employed within the Security Operation Center (SOC) and integral to the Incident Management Team. • Responsible for monitoring, analysing, and interpreting security/system logs for events, operational irregularities and potential incidents and escalating issues as appropriate.• Responsible for overseeing Email Security via Proofpoint, scrutinizing suspicious phishing emails, IOCs (Indicators of Compromise), and other potential security threats to discern false positives or determine the need for escalation.• Engage in regular threat hunting activities employing various tools and leveraging threat intelligence sources for information.• Handling Playbooks and updating regularly with the alerts and emerging threats.• Additionally, spearhead the Development of In-House Security Tools, including the creation of a bespoke SIEM solution from scratch utilizing open-source tools, transitioning it to a production-ready state.

• Built Wazuh, an open-source Host-Based Intrusion Detection System (HIDS)• Performed vulnerability management of all critical servers using Tenable Nessus to check the latest software updates of the servers