Monitor and respond to security incidents using SIEM/IDS/firewalls; perform vulnerability assessments and penetration testing; analyze threat intelligence; collaborate with IT to implement security best practices; support SOC 2 compliance, reporting, policies, and employee training.