• Monitor user activity, network events and signals from security tools to identify events. • Monitoring networks for malicious activity. • We look at IDS alerts ,suspicious emails,networks logs,and many other resources that provide insight into an entitys network activity. • install security tools, investigate the suspicious activities those tools detect, support audit and compliance initiatives, and participate in developing security strategies. • dealing with alerts thrown up by users and various security software, keeping eye on alerts generated by firewalls, IDS/IPS,SIEM, and endpoint protection tools, monitor, manage, and configure security tools, review incidents to assess their urgency, and escalate incidents if necessary. • Runs vulnerability scans and reviews vulnerability assessment reports. • Reactively remediate and proactively hunt the attacker,Escalate to higher tier as needed. • Conducting in-depth analysis of the incidents by correlating data from different sources. • Running Daily /Weekly / Monthly Compliance reports • Identify and report any Cyber Attack • Recommend Use case / content for process enhancement  • Health monitoring of SIEM solution • Troubleshooting any issues with SIEM component • Ensure all the integrated devices are sending logs without fail • Ensure all rules and reports are working as expected • Ensure regular backups are done for SIEM