• Conduct proactive monitoring and triage of security events.• Investigate security alerts received by different tools and log files. Determine if the alert is false positive or security incident.• Recognize potential, successful and unsuccessful intrusion attempts and compromises through reviews and analyses of event details and summary information.• Monitor security events and logs such as proxy, IDS/IPS, firewall, Email, Anti malware events, Endpoints security, Web application firewall to maintain situational awareness.• Investigate reported suspicious emails and check whether the emails are malicious, non-malicious or legitimate.• Collect threat intelligence feeds like IOCs from different Intelligence platforms and review potential indicators of compromise(IOCs).• Writing SOC monitoring use cases to detect new threats.• Fine tune SIEM rules to reduce false positive and remove false negative.• Worked in a 24*7 security operation centre.