• Monitored and analyzed important security alarms against cyber threats. • Providing incident response for phishing malware, virus etc. • Assisting in developing and fine-tuning content rules for security events. • Investigating network-based alerts using multiple security tools such as (SIEM, Firewalls, Proxy devices, IDS/IPS). • Assisting in creating and maintaining IRP (Incident response Plan) for security alarms and detectors. • Worked in conjunction with the CIRT team in performing analysis, response, and mitigation to any security event within the environment

• Monitored and analyzed important security alarms against cyber threats. • Provide incident response for phishing malware, virus etc. • Developed advanced correlation rules in Qradar. • Developed and fine-tuned content rules for security events. • Creating Firewall indicator sets with updated indicators of compromise. • Provided cyber security solution with the integration of ATAR (Automated Threat Analysis and Response). • Manage multiple security tools such as (SIEM, Firewalls, Proxy devices, Active Directory).