Key responsibilities:Cybersecurity Security Analyst adept at monitoring and responding to security incidents in 24/7 Security Operations Center (SOC) environment. Managed daily shift activities, conducted comprehensive incident response, root cause analysis, and fine-tuned false positives to optimize security operations efficiency.Knowledge in MITRE ATT&CK Framework for threat modeling, detection, and response strategiesDeveloped and upheld CrowdStrike EDR policies for FIM and USB Control, ensuring compliance with security standards and proactive threat mitigation.Executed exclusion and blocking procedures for IPs, domains, and URLs within the Web Gateway to enhance security posture and mitigate potential threats.Performed thorough analysis of client-reported phishing emails, leveraging diverse online resources including MS-O365 for obtaining audit/message trace logs to enhance detection and response capabilities.Implemented robust monitoring and protection measures to safeguard user data and files against ransomware attacks.Threat intelligence involves gathering, analyzing, and interpreting data to proactively identify and mitigate cybersecurity threats.Implementing proactive measures to safeguard user accounts against data breaches and ensuring swift response to mitigate potential risks.

Worked as 24/7 networking operation support environment. Managed daily shift activities, conducted comprehensive incident responseManaging All Store Network Devices -=>Monitoring & troubleshooting store down alerts, Firewall, Router, Switches, Servers related alerts.Handling Servers Down & High CPU utilization -=>Working with servers - Hypervisor server, virtual servers, restarting servers through console.=>Reducing CPU utilization - removing old users, deleting temp files, validating long sign in users. Working with Vendor & First level incident response=>Creating vendor tickets, Remedy tickets for monitoring and tracking to closure.troubleshooting Store registry, IIS application down alert, service agent down alert

Chat Support :-=>Handling customer, providing solutions to customer queries.=>Ecommerce user accounts handling - rewards issue, coupon issue, helping customer return and refund issues.Mainframe :-=>Monitoring - s04c abends, JCL error, Late ending alerts, Job failures, restarting jobs.=>Providing access to servers via mainframe by mirroring user ID using grep command.