SOC Lead

• Feb 2023 - Present

Team Lead - Global Security Operations Centre

• Dec 2021 - Feb 2023

• Leading and managing a Global MDR SOC team. • Creating and presenting weekly/monthly customer reports as part of SOC operations. • Defining roles and responsibilities for team members and conducting regular spot checks. • Defining Policies and procedures for business operation. • Working with in house SIEM tool Aissac and Qradar. • Reviewing runbooks for different technologies. • Leading and managing a Global MDR SOC team. • Creating and presenting weekly/monthly customer reports as part of SOC operations. • Defining roles and responsibilities for team members and conducting regular spot checks. • Defining Policies and procedures for business operation. • Working with in house SIEM tool Aissac and Qradar. • Reviewing runbooks for different technologies.

Team Lead- Global Security Operations Centre

• Sep 2015 - Dec 2021

• Monitoring logs of critical systems (Firewalls, IDS/IPS, e-mail servers, database servers, web servers, etc.) and take the appropriate system administrative actions, investigate and report on noted irregularities via Alien Vault, QRadar and other helping tools. • Generating and reviewing daily log analysis reports for premium clients. • Resolving client issues related to security events. • Assigning daily tasks to team members and conducting regular spot checks. • Listening to… Show more • Monitoring logs of critical systems (Firewalls, IDS/IPS, e-mail servers, database servers, web servers, etc.) and take the appropriate system administrative actions, investigate and report on noted irregularities via Alien Vault, QRadar and other helping tools. • Generating and reviewing daily log analysis reports for premium clients. • Resolving client issues related to security events. • Assigning daily tasks to team members and conducting regular spot checks. • Listening to team member’s feedback and resolve all issues or conflicts. • Creating SIEM alerts and fine-tune them to reduce false positives. • Learning and providing training new security events and Security logs for different devices like SonicWALL, Snort, and Fortigate etc. • Creating Python script for writing the events details of clients into excel sheet. • Regularly improving processes and procedures to provide better security operations outputs. Show less • Monitoring logs of critical systems (Firewalls, IDS/IPS, e-mail servers, database servers, web servers, etc.) and take the appropriate system administrative actions, investigate and report on noted irregularities via Alien Vault, QRadar and other helping tools. • Generating and reviewing daily log analysis reports for premium clients. • Resolving client issues related to security events. • Assigning daily tasks to team members and conducting regular spot checks. • Listening to… Show more • Monitoring logs of critical systems (Firewalls, IDS/IPS, e-mail servers, database servers, web servers, etc.) and take the appropriate system administrative actions, investigate and report on noted irregularities via Alien Vault, QRadar and other helping tools. • Generating and reviewing daily log analysis reports for premium clients. • Resolving client issues related to security events. • Assigning daily tasks to team members and conducting regular spot checks. • Listening to team member’s feedback and resolve all issues or conflicts. • Creating SIEM alerts and fine-tune them to reduce false positives. • Learning and providing training new security events and Security logs for different devices like SonicWALL, Snort, and Fortigate etc. • Creating Python script for writing the events details of clients into excel sheet. • Regularly improving processes and procedures to provide better security operations outputs. Show less

Executive E.D.P.

• Jun 2012 - Jan 2015

• Purchase of new devices and maintenance of existing devices & systems (including PCs., routers, printers, power backup devices, etc.). • Setting up and maintaining the entire network of the organisation • Ensuring smooth operation of Software’s, Internal networking and data backup. • Purchase of new devices and maintenance of existing devices & systems (including PCs., routers, printers, power backup devices, etc.). • Setting up and maintaining the entire network of the organisation • Ensuring smooth operation of Software’s, Internal networking and data backup.