● Working in Security operations center (SOC) team which is a centralized unit deals with security issues on an organizational and technical level.● Experience in Security Monitoring and Operation.● Experience in ArcSight SIEM Tool & EDR● Providing 24*7 Security to the Organization.● Having Knowledge on Email Gateway & Proxy server, Dark web Monitoring security tools.● Having Knowledge in Incident response and Mitigation. ● Creating Reports on daily and weekly based on requirement.● Knowledge on creation of Aggregation Rules, Correlation Rules.● Monitor for attacks, intrusions and unusual, unauthorized or illegal activity.● Escalating the security incidents based on the client's SLA and providing meaningful information related to security incidents by doing in-depth analysis of event payload, providing recommendations regarding security incidents mitigation which in turn makes the customer business safe and secure.● Analyzing the Health Check of the log’s sources integrated in the SIEM tools.● Generate reports for both technical and non-technical staff and stakeholders.Tools: SIEM (Security Information and Event Management), ArcSight, Crowd strike EDR and Symantec email gateway, Zscalar Proxy, Qualys Vulnerability assessment tool.Organizational Experience