Manage and optimize the performance of the SIEM and XDR solutions (Wazuh) to ensure effective security monitoring and incident detection.
Expertise in threat intelligence analysis, including the ability to identify, assess, and prioritize emerging threats to the organization.
Monitor and analyze trends, security logs, and alerts from Threat Prevention, firewalls, network appliances, Linux servers, Advance Web Application Firewalls, DDoS, API attacks, identity management, etc. to identify and mitigate security incidents.
Understand and analyze Palo Alto Networks Threat Detection capabilities to identify and respond to advanced threats.
Develop and maintain custom Yara rules for malware detection, leveraging Red Hat Insights and Bitdefender EDR for comprehensive malware protection.
Configure and maintain Security Onion for network traffic analysis, threat hunting, and incident response.