Mmeti Akoson

Security Operations Center Analyst @Benchmark Education Company

Columbus, OH, US

Investigate, analyze, and process endpoint alerts using SIEM tools such as Splunk Enterprise Security (Splunk ES), Carbon Black, and OSINT tools.• Provide 24/7/365 real-time monitoring of security tools, dashboards, and email alerts.• Provide triage analysis and initial preventive response in significant incidents including basic response analysis, quarantine, and escalation.• Use Google DLP to determine and discard false positive alerts and escalate cyber privacy incidents to the Privacy Team.• Escalate cybersecurity incidents to Tier 3/CSIRT for further analysis.• Provide incident response and remediation support capabilities and ensure that reported threats and vulnerabilities are identified and mitigated.• Perform triage on alerts by determining their criticality and scope of impact.• Perform security monitoring and reporting using Splunk ES.• Monitor security system and diagnose malware events to ensure no interruption of service.• Identify potential threats, anomalies, and provide report to the client.• Provide timely feedback to upper management and client on all incidents.• Conduct incident investigations, review vulnerability assessments, and perform malware analysis.• Monitor effective operation of security appliances and security capabilities in the corporate enterprise environment.• Coordinate threat hunting activities across the network leveraging intelligence from multiple internal and external sources, as well as cutting-edge security technologies.• Compile detailed investigation and analysis reports for internal SOC consumption and delivery to management.• Assist with the creation of the daily SOC report and brief customer as necessary.• Participate in daily security meetings with other contractor and customer teams.• Complete day-to-day checklist, including log review, vulnerability management activities, management report scheduling & running, alert analysis, filter modifications & escalation follow up activity status.