Nancy Uysal

Soc Analyst @Solventai Cybersecurity

Fairfax, VA, US

Create and track incidents and requests with an integrated ServiceNow (SNOW)ticketing system. Follow detailed operational processes and procedures to appropriately analyze,escalate, and assist in the remediation of security incidents. Liaise with the Company\'s Security Operation Center to respond to emergingincidents in a timely manner. Perform analysis of log files of Firewall, IPS, IDS, Server, and Proxy via Splunk SIEMsolution. Analyze PCAP files for Malware analysis and find details of the infected hosts andwrite IOC on executive summary reports. Identify, track, and investigate high-priority threat campaigns, malicious actors withthe interest, capability, and TTPs (Techniques, Tactics, andProcedures). Analyze and review escalated cases until closure. Conduct core information security activities: Security Information and EventManagement (SIEM), Malware Detection, Vulnerability Management, Education & Awareness, Open-Source Intelligence (OSINT), Network Monitoring and Log Analysis. Monitor and analyze Security Information and Event Management (SIEM) alertsthrough Splunk and identify security incidents for remediation andinvestigation. Document all activities during an incident and provide management with statusupdates during the life cycle of the incident. Provide information regarding intrusion events, security incidents, and other threatindications and warning information to the client