● Working in a 24x7 Security Operations Center● Monitoring the customer network using ArcSight i.e SIEM tool● Analyzing Realtime security incidents and checking whether its true positive or false positive● Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources.● Raising true positive incidents to the respective team for further action● Creating tickets on service now ticketing tool and assigning it to the respective team and taking the follow-up until closer ● Escalating the security incidents based on the client's SLA ● Investigate malicious phishing emails, domains, and IPs using Open-Source tools ● Installing ArcSight Connectors● Upgradation of ArcSight Connectors.● Doing the troubleshooting if any device is not sending the logs to the ArcSight.● Creation of ArcSight content like Correlation Rules, Query, Report, Dashboards etc.