-Identified and analyzed indicators of compromise (IOCs) such as malicious IPs and URLs, and ingested them into security tools.-Investigated phishing emails, domains, and IPs using open-source intelligence (OSINT) techniques.-Assisted in deploying and monitoring security threat detection and alerting technologies.-Utilized IDS/IPS to monitor network activity, analyzed firewall logs, and escalated security incidents-Maintained comprehensive documentation related to network security operations.-Identified and remediated infrastructure and application vulnerabilities discovered through continuous scanning and penetration testing.

-Performed real-time security monitoring and incident response using Splunk to analyze email and network logs.-Conducted in-depth investigations of network traffic, including log analysis, packet sniffing, and PCAP analysis with RSA Security Analytics and Wireshark.-Monitored security events from various sources (proxy logs, IPS/IDS, firewalls, Active Directory, etc.) to maintain situational awareness.-Escalated security incidents and collaborated with clients and vendors to ensure timely resolution.-Investigated suspicious activities and performed forensic analysis using SIEM, firewalls, IDS, and other security tools.-Provided timely and concise analysis and recommendations to clients within defined service level agreements (SLAs).