Implement the logic of offense/use case on SIEM for emerging threat to detect real time security violation.Perform deep analysis on security incident and events escalated by L1. Proactive hunting for threats that may have bypassed the organization's defense.Keep SIEM up and running by verifying logs continuity. Maintain storage, daily backups and updates. Manage application performance (Offense, Dashboards and Reports).On board new log sources as per requirements and deadlines.Create health check report on monthly basis.Access Management Monitor System degradation and fine tune accordingly Keep minor and major patches up to date.Audit and compliance support

Investigate , escalate and recommend appropriate mitigation and measures against the security offense after finding the root cause.Identify, analyze and investigate the security violation and vulnerabilities in organization network by using listed below security control on SIEM/Email Gateway/EDR solution :IDS/IPS FirewallsWeb Application firewall AntivirusDNS Security Phishing Email Analysis End Point Security .Information Security awareness to end user.Check IOC in environment and reported to concern if any communication found. Phishing Email analysis. Monitor User Activities. Maintain and monitor security rating of organization attack surface.

Work on Cisco, BDCOM, Raisecom and Linksys switches. Analysis ,troubleshoot and handle customer queries via tickets on OTRS website and via phone related with layer 1, layer 2 and layer 3.Monitor overall network via Network Management System (NMS), Cacti graph and MRTG graph.

Troubleshooting hardware and software issues. Installing and maintaining hardware and computer peripherals.