Leading 2 accounts, attending client calls, presenting weekly & monthly reports, managing teamand taking care of Billing & Shift management,Troubleshooting escalated incidents using SIEM and other SOC tools and handling alerts whichrequire technical triage and analysis.EDR/XDR tool experience and good knowledge on triaging malware, ransomware attacks.Perform thread hunting, update Analytical rules & Content hub solution with latest versionImproving analytical rules by fine tuning, adding exceptions, creating logic apps & automationaccording to client requirement.Manage email security by classifying user reported emails as - malicious/non-malicious.Creating email security policies according to business requirement.

Monitor and remediate security alerts in Azure Sentinel and Log AnalyticsEmail Security and creating SOP, preparing weekly & monthly reportsUnderstanding queries for cyber-attack detected through Kusto Query Language (KQL).Creating XML files from CSFC Threat AdvisorySending MDC Recommendations to increase Secure Score.