Setup and operating Managed Endpoint and Detection Response (MDR) program and proposing enhancement to achieve better efficiency/ effectiveness
Operating Network Traffic Analytics (NTA) program, identification of abnormalities in client’s environment
Performs threat hunting within the clients’ technology environments to uncover indicators of threat activities
Performs digital forensic preservation, legal documentation and electronic discovery for incidents and investigations
Supports the development of tactics, techniques, and procedures in providing proactive threat hunting and analysis against the available information sources (e.g. Netflow, DNS and Firewall logs, etc.)
Supports the identification and documentation of Indicators of Compromise (IoCs)
Leverages internal and external resources to research threats, vulnerabilities and intelligence on various threat actors and exploi...