Khaja sayed

SOC Analyst

• Job Details:Using IBM QRadar for monitoring and analyzing alerts triggered by security, network and databases. Creating and checking dashboards and offenses daily analyzing and raising incidents for suspicious activities. Good knowledge on end point tools. Analysis of malicious threat files and taking corrective and preventive actions. Analysis of phishing mails and taking necessary actions creating tickets in ServiceNow and working with different teams. Updating and resolving the tickets on a regular basis within SLA. Knowledge on IPS to detect and prevent threat signatures. Analyzing the suspicious signatures and blocking them whenever required. AWS GD for cloud security. Monitoring the alerts from cloud instances and acting accordingly. Running scans using Qualys for the assets and reporting the pending vulnerabilities. Knowledge on McAfee AV for detecting the suspicious/malicious files from end machines. Monitoring Zscaler proxy for URL's access made and verifying the patient 0 alerts triggered for suspicious file downloads.