▪ Providing technical and analytical guidance to all team members.▪ Reviewing and providing guidance to update SOP’s, runbook, andincident management procedure document.▪ Handling L3 level escalations with respect to incidents and otherad- hoc requests/queries.▪ Preparing and presenting weekly reports to client.▪ Integrated log sources like Firewall, IPS, Windows server, Linuxserver, AWS WAF, GuardDuty, CloudTrail, F5 WAF, ForcePointDLP, CrowdStrike EDR, Defender, O365.▪ Dashboard creation and rule fine-tuning▪ Adding IOC’s in watchlist and updating content packs regularly.▪ Working with respective stake holders to fine-tune the hardeningdocuments based on the SAFE tool report.▪ Tenable io tool Implemented and configured.▪ Performing patch updates and version upgrades.▪ Handling calls with SIEM TAC support.

▪ Handling L2 level escalations.▪ Incident analysis for various devices such as Firewall, IDS, IPS, Windows servers, web servers etc.▪ Worked in log source integration and troubleshooting non reporting log sources.▪ Fine-tuning rules.▪ Preparing and sending weekly and monthly reports to clients.▪ Investigating the phishing mails.

▪Daily task was to monitoring Akamai WAF and also searching malicious activity logs and traces using queries.▪ Once we identify the malicious activity towards websites, we use to alert the respective application owner to fix if the targeted application is vulnerable.▪ Blocking the blacklist IP’s in WAF.▪ WAF rule fine-tuning if required.▪ Preparing and sending daily and weekly report.

▪ Finding successful/potential intrusions and compromises through review and analysis of relevant event detail information.▪ Preparing and sending daily reports.▪ Monitoring alerts and performing L1 activities.▪ Launch and track investigations to resolution.▪ Differentiates false positives from intrusion attempts.▪ Alerting concerned stakeholders of intrusions and potential intrusions and compromises to their IT environment.▪ Actively investigates the latest security vulnerabilities, advisories and incidents.▪ Knowledge base update to effectively communicate information internally to customers.▪ Adhere to policies, procedures, and security practices.

▪ Incident Configuring the security tools as per Customer “Agreed to settings” in Security Documents.▪ Ensure Green Posture of the IT Infrastructure.▪ Tracking the Compliance issue and meeting target timeline.▪ Initiate remediation actions to resolve deficiencies pointed out as part of audit fieldwork.▪ Validating and storing artifacts for Audits and responding to Auditor request.▪ Defect Prevention for account managed.