Lead cybersecurity incident response for commercial and regulated customer environments. Monitor and correlate security events, investigate threats, conduct digital forensics and threat hunting, and coordinate incidents through closure. Develop playbooks, post-incident and forensic reports, remediation plans, and security standards. Maintain secure configuration baselines, assess vulnerabilities, support audits and regulatory investigations, and deploy security solutions. Participate in 24/7 on-call rotations, including weekends and after-hours.