Manager-Cyber Defense.ISD

• Manage security event monitoring and incident response using SIEM platforms, with preference for Azure Sentinel and ArcSight.

• Analyze and respond to security events from diverse sources such as firewalls, IDS/IPS, antivirus solutions, DAM systems, web servers, proxies, and banking applications.

• Develop and maintain alert rules and logic within SIEM to ensure accurate detection of security events.

• Assist senior personnel in managing complex security incidents and improving incident response times.