• Monitor security tools and investigate alerts across network, system, and cloud environments • Lead investigation and response for security incidents, including containment and remediation • Conduct vulnerability assessments and support penetration testing activities • Perform risk analysis and document findings with clear remediation plans • Develop and maintain runbooks, playbooks, and security procedures • Improve detection logic and response workflows based on emerging threats • Research new threats and recommend practical countermeasures • Prepare clear reports and brief stakeholders on incidents and risk trends • Mentor junior analysts and review investigative work for quality and accuracy • Support security audits and compliance activities as assigned