• Handling a large Security Operations Centre (SOC) team and managing multiple clients.• Working on technologies like Microsoft Cloud Security - Microsoft Sentinel, Azure Log Analytics, Microsoft Defender for Endpoint; EDR and Security Incident Management Tools (SNOW).• Implementing and Automating security solutions like Microsoft Defender for Endpoint, Microsoft Sentinel and Microsoft Defender for Cloud.• Creation of new usecase and finetuning the existing rules. • Proficient in KQL (KUSTO QUERY) for the log analysis and creation of rules.• Developed and implemented a comprehensive IT security policy that reduced the organization’s vulnerability to cyber threats and enhance security postures, worked on multiple SOAR capabilities.• Implemented security protocols to protect data and systems from cyber threats.• Developed a threat monitoring system to detect and respond to security incidents in real-time.• Developed an incident response plan to quickly respond to security incidents and minimize damage.• Collaborated with cross-functional teams to develop and execute customer incident response plans, resulting in quicker resolution times.• Handling escalations and performing malware analysis, email analysis, threat hunting and automation.• Actively coordinate and cooperate with other teams to ensure best IT Security practices and deliveries.• Provide clear, effective, timely and constructive feedback to Client as per SLA within TAT.

• Worked on technologies like Azure Sentinel, Azure Log Analytics (SIEM), RSA SIEM and Security Incident Management Tools (SNOW) and used KQL (Kusto Query).• Create, modify and review usecase as per the requirement.• Created sandbox for the clients for Malware Analysis and performed multiple analysis.• Implemented end to end Azure sentinel for one of the client.• Real-Time Monitoring, Analysis, Reporting and Escalations of security Events from Multiple log resources. • Daily Monitoring and generating health reports of all Server’s & Storage. • Created framework for security risk management to mitigate all the organization risk.• Implemented SANS incident response plan in Incident monitoring.