- Support in-house SOC in investigating and remediating security incidents- Create and fine-tune threat detection rules in ELK SIEM thereby expanding MITRE coverage- Develop an automated Incident Response tool that will pull logs from ELK SIEM perform analysis and respond by taking necessary actions

• Perform Surface Web OSINT to gather evidence associated with ongoing threat campaigns.• Research security threat intel sites/blogs to evaluate current attack campaigns and develop reports to present to themanagement

- Grading student assignments, projects, exams.- Assist professor in the lecture/administration

• Co-ordinated in a 24x7 Security Operation Centre (SOC) to proactively detect and respond to threats• Conducted in-depth analysis and triage of phishing email alerts, enhancing email security.• Prioritized and managed alerts generated by Proofpoint TAP, ensuring timely response to potential threats..• Enhanced continuous monitoring of endpoints effectively using Crowdstrike and Splunk SIEM.• Perform static and dynamic malware analysis of samples that generated alerts, improved… Show more • Co-ordinated in a 24x7 Security Operation Centre (SOC) to proactively detect and respond to threats• Conducted in-depth analysis and triage of phishing email alerts, enhancing email security.• Prioritized and managed alerts generated by Proofpoint TAP, ensuring timely response to potential threats..• Enhanced continuous monitoring of endpoints effectively using Crowdstrike and Splunk SIEM.• Perform static and dynamic malware analysis of samples that generated alerts, improved detection capabilities.• Mitigated suspicious user sign-in attempts using Azure AD, minimizing unauthorized access.• Resolved email gateway-related issues through fine-tuning of the email gateway configuration within Proofpoint.• Proactively hunted IOCs across threat intelligence sites, executing checks and blocks.• Developed and updated SOPs related to alerts and cybersecurity tools, promoting efficient incident handling.Tools :Falcon CrowdstrikeProofpointSplunkAgari Phishing Defense & Abnormal SecurityFlashpointServiceNow Show less