PRIMARY RESPONSIBILITIES:· Analyse incidents and alerts raised by EDR tools and SIEM to avoid breaches.· Handle Phishing Incident Response on reported phishing emails.· Conduct proactive and reactive threat hunts across the client environment.· Collect & co-relate evidence for investigated incidents.· Gather intelligence using OSINT techniques for IOC & IOAs.· Identify and contain malicious activity on client networks.· Produce post-mortem reports of the handled incidents.· Answer all client queries under agreed SLA.

• Assist in the administration and 24x7 monitoring of the SIEM tool.• Monitor and analyze security events network traffic, and security alerts across the enterprise.• Develop the specific content necessary to meet the organization’s security operationsgoals, to include: the formation of content-specific queries, templates, reports, rules,alerts, dashboards, and workflows.• Integrate data and event feeds with Arcsight solutions.• Admin responsibilities: user creation and management, backup-archival etc.• Manage security incidents and thereby minimizing the Number and Severity of SecurityIncidents.• Analyse, propose, and modify rules, reports, and dashboards as per the requirement.• Timely notification to appropriate team’s immediate or potential virus or worm attacks orother suspicious activity.• To actively coordinate and cooperate with other teams, to ensure best IT Security practicesand deliveries and a smooth interaction.• Specialized in network and log-centric analysis.