● Conducted a comprehensive analysis of all potentially suspicious emails originating from employees within the group, and promptly escalated any findings to the incident response team for further investigation and analysis. ● Administered vulnerability assessments through the implementation of regular network scans, analyzing resulting reports, and taking prompt action to mitigate critical vulnerabilities, thereby proactively enhancing the organization's overall security posture. ● Maintained a log management system for monitoring the company's database and analyzing suspicious log events in compliance with DFS500. ● Developed the company's monthly phishing campaigns, such as organizing emails that provide statistics to our team, providing training sessions for employees who are unaware of phishing schemes, and sending out simulation phishing emails to test employees. ● Being integrated into ASA (Application Security Assessment) working with application owners and application managers to monitor application risk ratings. ● Successfully contributed to the development and implementation of multiple standard operating procedures (SOPs) to ensure proper documentation of modifications to desktop procedures. Additionally, played an active role in maintaining an up-to-date library of SOPs, thereby facilitating adherence to established procedures and promoting operational excellence