Supports security operations monitoring, incident triage, alert investigation, threat containment, and technical incident response. The role analyzes network, malware, application, and endpoint security issues; executes response runbooks; works with SIEM, EDR, WAF, DLP, and related tools; and participates in an on-call rotation. It also contributes to security controls, processes, and technologies across cloud, corporate, and customer-facing systems.