Emmanuela Fru

About Emmanuela Fru

As a Cyber Threat Hunter| Cyber defend Analyst at ICS-Nett Inc, I collaborate with the…

Experience

1. Soc Analyst Ii

   ICS Nett, Inc. (ICS)

   Sep 2021 — Present · US

   Monitor and analyze real-time security alerts from SIEM (Splunk & Elastic Search), EDR (CrowdStrike, Fire HX, Microsoft Defender etc.), and other security platforms to identify potential threats and anomalies.• Investigate and respond to security incidents by examining logs, network traffic, endpoint telemetry, and other forensic data sources.• Conduct proactive threat hunting activities using behavioral analysis, threat intelligence, and frameworks like MITRE ATT & CK to uncover hidden threats.• Collaborate with Tier analysts, threat intelligence teams, and security engineers to escalate complex incidents and refine detection strategies.• Document incident response activities, create detailed reports, and contribute to post-incident reviews to strengthen future response efforts.• Tune and optimize SIEM use cases and detection rules to improve accuracy and reduce false positives.• Monitored network traffic for suspicious activity using SIEM tools such as Splunk and LogRhythm.• Assist vulnerability management teams with triaging scan results, identifying risk exposure, and prioritizing remediation actions.• Enforce security policies and support compliance with regulatory standards such as NIST, ISO 27001, and PCI-DSS.• Stay current on emerging threats, vulnerabilities, and attack vectors to continuously improve detection capabilities and response readiness.• Analyzed logs from various sources including web servers, application servers, databases, IDS and IPS systems. for possible security breaches.• Performed incident response and root cause analysis on security incidents.• Take part in the Security Operations on-call rotation, including leading all incident response efforts and documentation during your rotation.• Contribute to the creation and upkeep of runbooks to handle security incidents.