SOC Analyst
Arrowbench Solutions Pvt Ltd Bengaluru
Total years of experience :6 years, 9 Months
Monitoring Analyzing Reporting Security Incidents and events using HP ArcSight security
defense solutions like IPS, Firewall, Networking sniffing tools and Dedicated DDOS
Protection Appliances.
* Report security threat and vulnerability and liaise with 3rd party IT hardware and
maintainer and 2 nd level staff to help resolve Incidents.
* Prepare Daily malicious and suspicious communication report and Daily threat notifications
to the client and validate their response and help them to resolve it.
* Working as an Information security analyst on Real time threat management using SIEM
tools such as ArcSight.
* Creating Watchlists, Alarms, and Reports based on new threats and vulnerabilities.
* Reporting the health status of various components and troubleshooting of the devices and
connectors/Universal forwarders integrated to SIEM tool.
* Performing Real-Time Monitoring, security incident handling, Investigation, Analysis,
Reporting and Escalations of Security Events from Multiple log sources.
* Handles malware incidents, analysis and investigating to reach to the core.
* Take the necessary steps to remove the malware.
* Real Time Log analysis from different network devices such as Firewalls, IDS, IPS, router,
switches Operating Systems like Windows, UNIX, Windows Servers, Web Servers,
Antivirus and Domain controllers.
* Troubleshooting ArcSight Related Activities within short span of time Period.
* solution (Creating Active channels, Dashboard, Reports etc.)
* Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of
Security Events from Multiple log sources.
* Aggregating and Correlating the Logs and Configuring Reports, Queries, Rules, Filters,
Dashboards, Real Time Alerts and Console Resource Operations.
* Raising Tickets for incidents and to work till the closure of the ticket.
* Creation of Standard Operating Procedures (SOP) for the team.
* Detecting Phishing and Suspicious sites for multiple banks
* By creating active channels and daily report extracted from ArcSight, Domain analysis and
other methods
I used to teach them problem solving specially.
* I used to teach them that how to solve the error in the program and what is the solution of
which error i.e bugging & debugging in the code.
* I used to make them study from basic to advanced level which is out of their subject
syllabus and useful in the company
courses: Certifications ● Fortinet NSE1 and NSE2 Certified ● Attended ArcSight training at SIEM XPERT