• Log Analysis of network security devices, Windows devices and Linux Devices.• Log analysis Database and Application Server.• Facilitate Tier-1 Analysts in generating incident tickets.• Root Cause analysis of incident tickets and efficiently provide remediating steps.• Worked on multiple security appliances (Cisco AMP/Firepower, Stealthwatch, Kaspersky ATA/Endpoint, F5 WAF and Cisco FMC, TrendMicro).• Perform Triage Analysis on different endpoint security solutions.• Build Co-Relation Custom Rules for SIEM identified Use cases.• Provide call assistance to clients.• Other Responsibilities and additional duties as assigned by security managementteams.• Maintain Weekly and Monthly reports for clients regarding SOC audits and achievements.• Escalation of Alerts and Follow-up with concern teams.

Front line responder for offenses and alerts in a 24/7 shift base role.• Monitoring of alerts over SIEM and EDR while in depth correlated analysis.• Identification of gaps in logging and writing logging baseline documents.• Integration of log sources through WinCollect agents and syslogs.• Check Custom Developed Dashboards, Anomalies & Report exceptions.• Take Follow-ups on incidents.• Analyze Phishing emails and respond accordingly.• Properly Input the incident details in incident management portal along with justified evidences.• Reports incidents to the concern department.• Communicate effectively with customers, team mates and management.• Perform Day to Day tasks such as IOC Updating on various security controls.• Participated in vulnerability management processes, evaluation and troubleshooting of security solution.• Staying up to date with emerging security threats.• Other Responsibilities and additional duties as assigned by security management teams.