SOC Analyst

Providing 24x7 security monitoring and incident response,focusing on identifying,analyzing,and mitigating security threats using Azure Sentinel, CrowdStrike,Microsoft Defender for Endpoint,and Cortex XSOAR, Monitoring email traffic for potential threats using Defender and email filtering tools to identify phishing,malware,and other attacks, Proactively hunting for threats using log data and various resources to detect internal threats and vulnerabilities, Performing thorough analysis of EDR alerts,assessing potential impacts,and recommending mitigation actions, Creating, assigning,and tracking incidents and tickets in ServiceNow, ensuring SLAs and KPIs are met, Developing and maintaining technical documentation,including incident reports,threat intelligence reports,and SOPs, Collaborating with stakeholders to deliver threat intelligence insights, including Indicators of Compromise (IOCs) and updates on emerging cyber threats like phishing,malware,and ransomware, Executing blocking and remediation activities,including blacklisting malicious URLs,file hashes,and domains, Providing security awareness training and continuous support to users for phishing attack prevention and cyber threat mitigation, Monitoring and analyzing security events and incidents to identify potential threats and vulnerabilities, Investigating & responding to security alerts & incidents in a timely manner.