• Perform first-level alert triage and response for security monitoring tools (SIEM, EDR, email security, etc.) • Investigate and document security alerts, escalating issues when appropriate • Support the organization’s phishing awareness and response program, including reviewing reported emails and assisting with user education efforts • Assist with general security operations tasks, including log review, ticket management, and tool optimization • Create and update security documentation, playbooks, and standard operating procedures (SOPs) • Participate in light threat hunting activities, analyzing logs and telemetry for suspicious activity • Assist in writing or tuning detection rules under guidance from senior security team members • Contribute to improving operational workflows and automation where possible