Responsibilities:Worked in a 24x7 Security Operation Centre.Experiencing monitoring and analysis of events and logs from firewall, Routers and other network devices.Acknowledge, analyse and validate incidents triggered from the correlated events through SIEM solutions.Undertake first stages of false positive and false negative analysis. Threat and Vulnerability analysis. Monitor SIEM dashboard for security alerts on daily basis.Collects data and context necessary to initiate level 2 escalation.Event mapping for unknown events.Log Source on boarding.Creating Searches and Dashboards on SIEM.Reasonable for Creating daily and weekly reports.Ensure completeness of the incident information.

Courses Completion:Introduction to Cybersecurity.CompTIA Network+.CompTIA Security+.SIEM Incident Detection.IBM QRadar SIEM Official deployment and configuration. Wazuh SIEM deployment and configuration.Windows,Linux logs integration with QRadar.