Marmik Shah

SOC Analyst

Infopercept Consulting Pvt Ltd•  December 2023 - May 2024•  Ahmedabad

- Conduct proactive monitoring and triage of security events. - Investigate all security alerts received by making use of different tools and log files possible to determine if the alert is a false positive or security incident. - Recognize potential, successful, and unsuccessful intrusion attempts and compromises thorough reviews and analyses of relevant event detail and summary information. - Respond to security incidents by containing and mitigating the threat, documenting the incident, and providing recommendations for remediation. - Monitor security events and logs such as Proxy, IPS/IDS, Firewall, Email, Anti-Malware events, Endpoints Security, Web Application Firewall to maintain situational awareness. - Investigate malicious phishing emails, domains and IPs using Open Source tools and recommend proper blocking based on analysis. - Investigate all reported suspicious emails and determine whether the emails are malicious, non-malicious or legitimate and reply to the user who reported the suspicious email with a message reporting the findings and any recommendations. - Collect global threat intelligence and internal threats then inject actions based on analysis and recommendation. - Monitors health of security sensors and SIEM infrastructure. - Generate and delivered the daily, weekly and monthly on time. - Worked in a 24x7 Security Operations Center. - Perform shift handoff at the end of every shift to provide situational awareness to the incoming shift.