Supported Customer in Setting up OT SOC by defining Procedure, SOC Operational Activities, SOC Roles and Responsibilities, SOC Monitoring. Deployed SIEM Solution for OT Environment and Onboarding of OT devices to SIEM Solution. Successfully Implemented FIFA 21 Use cases and other use cases as per the OT requirement. Created custom rules and parser to parse the unsupported devices logs to SIEM Solution. Successfully started a 24x7x365 Security Operation centre (SOC) environment the OT SOC Operation. Conducted Red Team or Penetration testing exercise to detect and get the logs in SIEM Solution to create the rules accordingly to detect and alert. Coordinated with 3rd party vendor for assisting in Penetration testing for systems and submitting the detailed report to the higher management, led and coordinated with the team for closure and fixation of the vulnerabilities reported. Experience includes working with Nozomi IDS, involving the analysis of network traffic, troubleshooting, writing assertion queries, and conducting investigations.

Worked towards analyzing Customer Requirements and offered suitable solutions as per Industrial Cyber Security standards Participated in Technical discussions with customers and established coordination with multiple OEM vendors to integrate their ICS systems like DCS, SCADA, MMS, FMS, DeltaV, Triconex with the Cyber Security Infrastructure Contributed to the Development of DDS, FDS, MOS, FAT&IFAT, Network Architecture documents as per the standards like IEC62443 and NIST 800-82 Gathered knowledge of IoT technical concepts such as JSON, OAUTH, ZIGBEE, and MUD. IoT protocols such as Extensible Messaging and Presence Protocol (XMPP), Data- Distribution Service (DDS), Advanced Message Queuing Protocol (AMQP), And Lightweight M2M (LwM2M). Working with application development and maintenance team to ensure that the application security coverage from the requirement gathering level, SDLC, application implementation and after implementation. Coordinated with governance and risk management team to maintain application security management policies/ procedures and risk management.

Spearheaded use cases, creating rules as per client\'s requirements and security standards in SIEM Administered and worked towards fine-tuning Alarms and all admin tasks performed on SIEM Monitored event sources log regularly & log validation exercises as per developed standards and guidelines Monitored network, application, and system log events to identify any potentially abnormal system behaviors and raise them as incidents for investigation Collaborated with client\'s internal Cybersecurity team on critical and high-security incidents and worked on EDR (Active threat hunting based on emerging cyber threats). Threat hunting based on IOCs. Accountable for Malware Analysis, performed the analysis of vulnerabilities which is Scanned by Nessus and remediating vulnerabilities Led Web Application Scanning for vulnerabilities and Remediation.

Accountable for monitoring, fine-tuning, creating rules, use cases, Alarms, and all admin tasks performed on SIEM. Worked on Log Source integration of windows, Linux, AV devices with SIEM Led Health Check on SIEM, troubleshooting issues on SIEM Worked towards integration, administration of SIEM infra for multiple clients in GSO Offered operational and technical support to GSOC Level 1 Team Led Incident and problem handling unclassified suspicious events Developed initial reports for security incidents and worked towards an analysis of security log events from various event sources including firewalls, intrusion prevention systems, Windows servers, UNIX servers, and custom applications