implementation

Network Security & System protections Monitoring computer networks for security and issues and investigating security breaches & other cyber security incidents. • Critical Incident handling, response, and coordination for incident closure • Customizing Customer report • New threat and vulnerability research, developing new skills with respect to security (Splunk, Arcsight, Nessus)• Validate the threat intel and research on new IOC• Cross verify incident details that are recorded by tier 1 on the tickets• Train newly hired soc analyst on SOC Policy and procedures • Audit Security incidents for proper categorization and actions taken • Provide inputs to SOC tools, experts enhancement, and fine-tuning • Creation of Thread advisories and validating the IOCs before sharing with customers

• Provide feedback on new alerts or correlation rules and reports • Determine, document, and report false positive events or alerts • Identify attacks or attack patterns and gather information on attackers • Health check of SOC tools such as SIEM and its integration points• Verify Logging and reporting of integrated devices • Generate scheduled SOC reports• Manage incident tracker and provide shift handover/updates to team • Preparing Daily Monitoring activities (Daily Checklist, Report tracker, and so on) for SIEM Health Check and Reports• Performing basic troubleshooting for any discontinuation in the normal functioning of SIEM components • Understanding and following the Escalation matrix of every customer/vendor/Internal Towers• Preparing SOPs/KEDBs for future reference