• Responded to and managed high-priority security incidents, performing in-depth analysis andidentifying root causes to reduce risk and prevent recurrence.• Performed threat hunting and in-depth analysis of security events using SIEM and EDR tools toproactively identify and mitigate potential threats.• Reviewed ongoing and completed investigations by junior analysts for potential escalation andprovided QA feedback to analysts and SOC Managers.• Provided guidance and support to junior SOC analysts, fostering a culture of continuouslearning and improvement in cybersecurity.• Served as technical point of escalation and contact for SOC as 3rd shift team lead.• Perform Ad-hoc SOC tasks and investigations as directed by Managers or Directors.• Assisted in recruitment to build team of top performers.• Assisted with the development, measurement, analysis, and maintenance of internal forSecurity Operations, providing timely reports to leadership teams.• Created and maintained processes, training videos and documentation for security procedures.• Created and delivered tailored security training materials for employees, raising organizationalawareness and promoting best practices.

· Reviewed IDS/IPS events and identify anomalous activities or potential network security risks.· Supported client security policies and activities for networks, systems, and applications including vulnerability management, incident reporting, mitigation, and continuous monitoring.· Assisted team members with proper artifact collection and detail to clients' examples of artifacts that will satisfy assessment requirements.· Performed tuning and filtering SIEM alerts to ensure only relevant security data is gathered· Created runbooks and process documentation to streamline SOC procedures for current and new analysts.

· Perform incident response to events such as host triage and retrieval, malware analysis, remote system analysis, and remediation efforts.· Conducts investigation and network traffic analysis using raw packet data, network flow, and Intrusion Detection/Prevention Systems (ID/IPS) output from communication networks.· Maintain knowledge of customer enterprise environments and collaborate with customer IR teams to provide actionable recommendations to threats. · Collaborate with the Content Development and Operation Security to tune out False Positive to increase rules fidelity and network availability to customers’ environment and security tools.· Provide on-the-job security education & training for new analysts.

· Deployed under Cap Gemini to work for the world’s biggest chain restaurants.· Performed data backup and recovery, troubleshoot, and re-image on enterprise data servers.· Migrated client’s static WAN 1.0 network to DHCP WAN 2.0 network· Primary responsibilities include preparing IT equipment, servers, and network devices for relocation.

Configure and test network protocols in controlled environments.Reinforced protocols concepts discussed in lectures.Simulate network environment in business settings.