- 24/7/365 Monitoring using SIEMs, EDRs & other security monitoring tools. - Investigating and Escalating Security incidents, creating remediation plans.- Provide Incident response and threat hunting.- Created SIEM and EDR use cases and tuned false positives, reducing the noise by 60%.- Designing alerting rules and dashboards for threat hunting.- Conducted purple teaming exercises and IR drills to create new use cases having a TP ratio of 80%.- Compiling and Presenting Weekly/monthly threat reports.- SIEM & EDR Administrations and MDR services to multiple clients.- Expertise in cloud security for AWS, Azure, and GCP.- Proficient in purple teaming and blue teaming methodologies.- Implementing defensive measures to block attacks using security tools.- Leveraging automation to enhance efficiency.

Working as cloud Security Engineer, my role was to monitor and secure the cloud infrastructure byidentifying and mitigating security risks and implement counter measure for these threats.Responsibilities:- Configuring AWS security tools like AWS WAF to mitigate different kinds of Web attacks.- Implementing new use cases at SIEM, IDS, and EDR levels to detect security incidents.- Gathering and Analysis of forensic artifacts from compromised resources.- Analyzing and hardening of access policies like IAM, AWS & Azure Roles, and S3 policies.- Integrating AWS log sources with Azure sentinel- Maintaining and scanning AWS resources for any security risks.

==> SIEM & EDR Monitoring==> Documentations==> Daily huddles