● Working in a 24x7 Security Operations Center● Monitoring the customer network using Arc Sight SIEM● Act as first-level support for all Security Issues● Analyzing Real-time security incidents and checking whether it's true positive or false positive● Performing Real-Time Monitoring, Investigation, Analysis, Reporting, and Escalations of Security Events from Multiple log sources.● Raising true positive incidents to the respective team for further action● Creating tickets on service now and assigning it to the respective team and taking the follow-up until closer ● Escalating the security incidents based on the client's SLA and providing meaningful information related to security incidents by doing an in-depth analysis of event payload, and providing recommendations regarding security incidents mitigation which in turn makes the customer business safe and secure.● Contacting the customers directly in case of high-priority incidents and helping the customer in the process of mitigating the attacks.● Monitoring security systems and networks for anomalies● Work closely with business units to ensure that they know what and how to feed data into the Arclight SIEM● Co-ordinate with networking teams to maintain and establish communication to remote Arclight Connectors● Investigate malicious phishing emails, domains, and IPs using Open-Source tools and recommend proper blocking based on analysis● Installing Arc Sight Connectors● Upgradation of Arc Sight Connectors● Integration of new devices with Arc Sight such as Windows, Linux, CISCO Firewall, Routers, Switches etc.● Doing the troubleshooting if any device is not sending the logs to Arc Sight.● Creation of Arc Sight content like Correlation Rules, Query, Report, Dashboards, etc.● Maintain keen understanding of evolving internet threats to ensure the security of client networks.● Troubleshooting SIEM dashboard issues when there are no reports getting generated or no data available