• Having 3+ years of experience as Security Analyst (Security Operation Centre team)• Experience on SIEM (Security Information and Event Management) tools like Monitoring real-timeevents using Splunk. QRadar, LogRhythm• Having knowledge on ISO 27001:2013, PCI DSS compliance, NIST, vulnerability management• Good Knowledge on OSI Models, Protocols, security concepts, WAN and LAN concepts, Routingprotocols, Firewall security policies, VPN.• Experience on performing log analysis and analyzing the crucial alerts at immediate basis through SIEM• Handling critical alerts from Symantec Endpoint Protection and working for resolution.• Handling alerts from Crowdstrike EDR and investigation.• Correlating the incoming events by creating rules based on specific set of conditions and logicaloperations.• Hands on experience on Threat Investigation analysis and Security Monitoring and Operation.• Identify malicious URL’s and suspicious IP’s from IDS events generated and also block the maliciouswebsite on proxies to prevent future download of the virus• Analysis of virus alerts triggered by the Symantec (SEPM) and provide the remediation steps• SEP health analysis and reporting the outdated workstations to update the virus definitions• Phishing and Spam Email analysis through Ticketing tool Livetime.• Preparing Vulnerability Assessment reports and remediation steps post assessment using Tenable Nessusand Qualys Guard.• Exposure to Ticketing tool like Service Now.• Good communication, problem solving skills and the ability to acquire new skills in a timely manner.• Ability to build successful rapport with co-worker’s, employees, Clients.