Responsibilities

• Monitor, investigate, and respond to security events across endpoint, identity, cloud, and network environments.


• Lead incident response activities, including containment, remediation, and post‑incident analysis.


• Operate and improve detection and response capabilities using SIEM, XDR, and cloud security tooling.


• Partner with infrastructure and development teams to remediate issues and reduce recurrence.


• Stay current on threats, attacker techniques, and platform capabilities to strengthen defenses.


• Contribute to security improvement projects, including design and implementation of controls and tooling.


• Support compliance and audit activities by producing evidence, validating controls, and participating in assessments.