Monitor and triage security alerts, support incident response and vulnerability remediation, review logs, tune SIEM detections, and maintain security documentation. The role contributes to risk assessments, control improvements, automation, dashboards, and operational playbooks while collaborating with internal teams. It requires familiarity with EDR, SIEM/SOAR, CSPM, vulnerability management, firewalls, cloud environments, networking, operating systems, security frameworks, and common attack techniques.