SOC Operations (Tier 2/3), Incident Detection, Triage & Response, Threat Hunting, Log Analysis, Alert Correlation, Root Cause Analysis, Playbook Execution, Security Incident Documentation, Splunk, IBM QRadar, Microsoft Sentinel, ArcSight, CrowdStrike Falcon, Microsoft Defender for Endpoint, Cortex XSOAR, Splunk Phantom, Wireshark, Zeek, Snort, Suricata, MITRE ATT&CK Framework Mapping, IOC Analysis (IP, Domain, Hash), Malware Analysis (Static & Behavioral), Threat Intelligence Feeds, OSINT, Basic Digital Forensics, Evidence Collection, NIST CSF, NIST 800-53, Vulnerability Scanning (Nessus, Qualys, Rapid7), Patch Management, Risk Assessment, Security Gap Analysis, Remediation Tracking, ISO 27001, CIS Controls, AWS & Azure Security Monitoring, IAM, MFA, Privileged Access Management (PAM), Cloud Log Analysis (CloudTrail, Azure Monitor), Endpoint & Server Hardening, Python for Security Automation, PowerShell, Bash, Regex for Log Parsing, Windows & Linux Security, TCP/IP, DNS, HTTP/S, VPNs, Firewalls, Network Segmentation