Having total 3.8 years of experience in Information Security and currently working as Security Analyst (SecurityOperation Center team).•Experience on SIEM (Security Information and Event Management) tools like monitoring real-time events usingQradar.•Good Knowledge on OSI Models, Protocols, security concepts, WAN and LAN concepts, Routing protocols, Firewallsecurity policies, VPN.•Preparing daily, weekly and monthly report as per client requirement.•IDS/IPS – Check Point, HP Tipping Point, Check Point IPS.•Investigating and creating case for the security threats and forwarding it to Onsite SOC team for further investigationand action.•Identify malicious URL’s and suspicious IP’s from IDS events generated and also block the malicious website on proxiesto prevent future download of the virus.•Experience on performing log analysis and analyzing the crucial alerts at immediate basis through SIEM.•Having ability to read and understand packet level data Intrusion detection and prevention and Network SecurityProducts (IDS/IPS, firewalls, etc) Host Security Products (HIPS, AV, scanners, etc).•Phishing and Spam Email analysis through Ticketing tool Live time.•Handling critical alerts from Symantec Endpoint Protection and working for resolution.•Handling alerts from Crowd strike EDR and investigation.•Having excellent knowledge of Intrusion Detection (deep TCP/IP knowledge, and Cybersecurity), various operatingsystems (Windows/UNIX), and web technologies (focusing on Internet security).•Exposure to Ticketing tool like ServiceNow.•Correlating the incoming events by creating rules based on specific set of conditions and logical operations.• Hands-on experience in Threat Investigation analysis and Security Monitoring and Operation.•Strong knowledge of the Incident management lifecycle.•Analysis of virus alerts triggered by Symantec (SEPM) and provides the remediation steps.•SEP health analysis and reporting the outdated workstations to update the virus definitions.•Preparing Vulnerability Assessment reports and remediation steps post-assessment using Tenable Nessus and QualysGuard.•Having knowledge on vulnerability management.