• First point of contact for the client regarding analysis on priority cases.• Working as Team Lead where Team size is 25+ and taking care of L1 & L2 Team for day to day operational along with Technical transitions. • Responsible for analyzing and investigation of security alerts trigger by SIEM and other Security Tools.• Fine tuning the use case for monitoring to improve the quality in day to day activities in SIEM for analysis.• Work on Deloitte ThreatConnect to find new Threats or IOCs.• New threats assessment with IOC’s in OSINT.• IOC creation in FireEye HX and coordinating with FireEye and Symantec support team.• Work on Security Scorecard to check the IP reputations. • Deep analysis on FireEye (HX/NX), PaloAlto alerts and coordinating with other teams.• Preparing the various reports like weekly - Monthly Sec Ops Reports and present it to client/HCL management over meetings.• Real time phishing detection/analysis and taking the appropriate action taken.• Triage of Security Incidents based on the severity of alerts.

• Responsible for Administering, Monitoring and Investigation of SIEM & security alerts trigger via HP ArcSight and IBM QRadar.• Daily job includes monitoring analyzing and escalating the threats observed and recommends proper action to control the threat.• Prepared and customized ArcSight report templates based on client requirement.• Sending Security Alert messages on newly found vulnerability to the concerned Security team and respective customers without fail.• Escalation and coordination with the other domains for unresolved incidents.• Health check for configured device groups in SIEM to ensure event flow.• Health Monitoring and troubleshooting issues like DAT Out of Date etc.• Preparing monthly Microsoft/Non-Microsoft patch report.• Active Threats Removal, Remediation and running on demand scanning on Qualys Guard.• Informing incident management team to provide rapid response to outbreaks, problem reporting and follow-up assistance.• Weekly/Monthly incident analysis report. Analyzing the events and providing solutions for the incidents.

• Coordinate with team to provide good quality of services to client• Active directory Local OU management, Windows Imaging server handling• Administration on deployment console, VPN server, DRA, BlackBerry server• Responsible to create, deletion and managing new user domain account in Active Directory• Assign file and folder permission on server• Blackberry L2 Support, administration, User creation, deletion• Administration of smart card (WISE card) like user creation, deletion, access Installation, configuration and troubleshooting of smartcard• Troubleshooting the LAN/Network related problems Hardening of Laptops, desktops, Workstations to remove all the known vulnerabilities with latest service packs and security patches• Provide Remote support for the remote user using Altiris Console, Net Meeting, RDP and telephonic• Troubleshooting Citrix client and remote server client issues on process Requirement basis• Taking care of virus related issue using MacAfee anti-virus • Troubleshooting the operation related issue on call basis for all the clients• Taking follow up from other production team and server management team for any escalated issues• Vender management

• Information Security SPOC for a particular site. Details are mentioned below as SPOC:I. Working on safe-boot issues like installation, removal, unlocked safe-boot password co-ordination with INFOSEC teamII. Working on antivirus like Symantec, Sophos and SEP (Symantec End Point Protection)III. Responsible for virus related issues, Weekly Patch deploymentIV. Responsible to ensure that desktops/Laptops are complaint to Genpact IT SEC PoliciesV. Download latest patches from Micro Soft site through WSUS server then testing these patches on VI. UAT ports (User Acceptance Test) before remotely deployment Degaussed the faulty HDD before sending it to vendors• Handling problem tickets, SR Requests and escalated tickets• Outlook issues, Responsible for all IT Security related issues and MS Office• Administration of local user and roaming user profiles with active directory Services• Web based applications, terminal client, VPN installation, e Token troubleshooting etc.• Vendor Management, Business Object client support etc.• Provide Remote support for the remote user through Net Meeting and RDP• Installation of different types of process related software’s & configuration with minimum time of escalation

• Hardware Problems (CPU, Monitor, LAN, Printer, Laptop)• Software Problems (Virus Updating (Norton), Windows Patch, MS office).• Installation & Troubleshooting of windows all version 98, 2K, XP, Vista• Prepare Daily call report and forwarding to IT manager• Co-coordinating with vendors to get replace faulty parts