Specialist Security System, Information Security Engineer, Security Analyst,SIEM expert, Endpoint Ma

* Worked as a SOC Security specialist in a team that manages multiple global customers.
* Coordinating with management and other teams for critical security incidents and respond various incidents as per industry best practices,
facilitating incident management team exercises.
* Perform end-to-end delivery for standard solutions for customers.
* Job scope includes implementation of various network security solutions for various global customers.
* SIEM Toolset configuration and manage daily SOC activities.
* Perform various SIEM administration tasks e.g., adding data sources, logging configuration, Alarm, watch list/reference sets, reports, and
use case creation on SIEM for multi-client Infrastructure.
* Vulnerabilities Assessment and Risk Assessment for critical security threats, communicate with various teams to resolve security gaps.
* Using various security analytical techniques e.g., Threat Analysis, Threat Intelligence, Malware deep analysis, Abnormal Behavior analysis,
etc. to create the best security control.
* Worked on devices like Cisco ASA, Palo Alto, FortiGate, Zscaler proxy, SRX, Checkpoint, F5 load balancer, etc.
* End-to-end ownership for project delivery from the Network perspective. Upgrade/Deploy new firewalls as per the requirement.
* Troubleshoot issues occurring daily and attend bridge calls on priority incidents.
* Mentoring the team members on technical aspects.

* Configure changes on the Checkpoint firewall which includes, policies, and VPN (Site to Site).
* Monitoring, Reviewing, and Reporting Phishing Activity, Brand Abuse emails, and Fraudulent Websites.
* Managing and Leading Security Incident / Event Response and Monitoring Teams.
* Configure changes on Cisco ASA, which includes Nat (pre and post-8.3), routes, objects and object groups, policies, Interfaces, VPN (site to
site, Remote Access), LDAP, High Availability, and upgrades. Configuring ASA from scratch. Installing licenses. Changes are done via GUI and
command line Monitoring/analyzing and managing the real-time events for the security devices (firewall, Routers, Servers, etc.) Using the
SIEM tool.
* Troubleshoot issues occurring daily and attend bridge calls on priority incidents.
* Monitor & Manage 24x7 coverage of the support service.

* Installation and troubleshooting of Cisco Devices (Like Firewalls, IPS, Routers, etc.)
* SOC Monitoring and Incident Response Log management and Security fine-tuning
* Configure changes on the Checkpoint firewall which includes, policies, VPN (Site to Site)
* Configuring & Troubleshooting Routing Protocols like OSPF, EIGRP, and RIP Installation and troubleshooting of proxy (Bluecoat and
MacAfee, etc.) Work on BMC remedy ticketing tool
* Work with TAC of the vendor devices in case required.