SOC Analyst

Probe cyber security events using Splunk, Sentinel One, Security Onion, Prisma Cloud, and streamline the investigation process with Cortex XSOAR. Interpreting the provided information to form a sound hypothesis on the root cause, aiding in efficient resolution, Scrutinizing abuse inbox emails(phishing, scam, spam etc.): analyze headers, attachments, URLS, and remediation based on the analysis, Investigating UEBA incidents in Microsoft ATA, Defender for Identity, and Prisma Cloud, alongside suspicious user activities in Okta, Searching through firewall, email, proxy logs to recognize potential, successful and unsuccessful intrusion attempts through reviews and analysis of relevant event detail and summary information.

SOC Analyst

onitoring and analysis of cyber security events using Microsoft Sentinel , IBM Qradar, LogRhythm, Carbon Black EDR, and Microsoft Defender; and utilizing CDC(SOAR) platform for effective investigation tracking. Updating client-specific IOCs received from the Threat Intelligence Team to Qradar and LogRhythm Management Console reference sets; and conducting proactive searches for any historic activity from the IOCs, Escalating incidents to SOC L2, SIEM, EDR, Network, and IT support teams when necessary, Undertaking searches for detecting vulnerable and unscanned devices using Qualys VMDR, Delving into UBA incidents in Qradar and suspicious user activities in Microsoft Defender for Cloudapps. Develop and produce daily, weekly and monthly metrics for security and vulnerability incidents including trends and mitigations for the same.

Cyber Security Analyst