- Troubleshoot with other support group on the systems that are not logging into the SIEM.
- Correlate events to identify the impacted device/service groups for next action.
- Create Security Reports in SIEM.
- Monitor the Security Event as per the defined Event monitoring procedure for number of devices logging into SIEM.
Data Security (DLP)
- Identify critical information in the given network / clients by scanning.
- Perform DLP Event monitoring of Email transactions from Source Email ID to Destination Email ID via Network DLP and analyze for policy violations based on SOP.
Web Security (Content Filtering)
- Perform SSL Inspection on Content Filtering.
- Monitor the Web Security Event as per the defined Web Security Event monitoring procedure.
- Perform whitelisting and Blacklisting for Web Site URL as per the define SOP.
Endpoint Security (Antivirus)
- Perform monitoring of the End Users Systems and Servers for Out-of-Date Virus Definitions as per the defined Antivirus Event monitoring procedure.
- Develop Antivirus reports for Users Systems and Servers.
- Analysis of identified virus/worm/Trojan on End User System and Servers as per the defined procedure.
Vulnerability Management
- Navigate and understand Vulnerability Management tools like Quays, Nessus, Rapid7, Found Stone etc.
- Export schedules VA Scan report as per the requirement.
3). Analyze & categorize Windows, UNIX and Network device vulnerabilities.