* QRadar Log Source Integration.* Use Case Creation and Finetuning, DSM Parser Optimization.* Manage the SOC team (24/7) and guide them with Incident investigation and provide necessary remediation actions for mitigatinging the risk.* Perform analysis of potentially harmful security alerts and provide recommended actions.* Recommend IT strategies, policies, and procedures by evaluating the outcomes outcomes.

* Integration and Deployment of File Integrity Monitoring tool (Tripwire).* Check for file integrity and raise service requests to appropriate service operation teams for any critical modifications.* Vulnerability scanning using VMS and provide appropriate patches for any critical vulnerabilities identified.* Monitoring of security incidents in QRadar SIEM and create a case in Resilient IRP for True Positive's.* Manage the Practitioner's in respective shift's and provide guidance in incident analysis.

* Security Incident handling, and administration in RSA enVision SIEM.* Create/optimize correlated alerts based on best practices and Customer’s requirement.* Manage application performance, capacity, availability and disk space.* Provide Scheduled reports, Adhoc reports on daily/weekly/monthly basis upon customer’s requirements.

* Review the logs and check for the suspicious events, if found any activity as suspicious, requires to raise an Incident ticket to the concerned platform team and follow up with the platform team for the closure of incident ticket.* Creation of policies tuning, finding exception, analyzing false positive.* Check whether the assigned database have been loaded for the current date along with the logs. * Policy creation and report generation.