• Primarily responsible for executing the security event assessment of security events from SIEM reporting systems, identify threats to our environment, remediate security threats and recovery of systems from security incidents. • Works closely with Level 2 & Level 3 team towards the continuous improvement of the service. • Responsible to ensure that all applications are functional and secure (IT security, Application Security and Information Security). • Perform real time security monitoring and incident response activities across the global networks, leveraging a variety of tools and techniques. • Detect incidents through use cases, threat intelligence and hunting process across security-relevant data sets. • Recommend new, repeatable methods for finding malicious activities. • Ensure all standards including Security Incident Response Process and guidelines are followed. • Must be able to communicate effectively with individuals at all levels of the organization. • Provides correlation and trending of critical cyber incident activity. • Improving the service level for security operations and monitoring. • Creating and maintaining system documentation for security event processing. • Author Standard Operating Procedures (SOPs) and training documentation. • Analyze incident indicators and tactics, techniques, and procedures (TTPs) to identify tools, provide context and severity. • Manage and maintain security tools to increase incident response efficiency. • Improve ability to detect and respond to intrusions. • Help create and maintain process and tools documentation.