Monitor, analyze, and respond to security alerts and potential threats affecting systems and networks
Perform threat assessment, vulnerability identification, prioritization, and remediation follow‑up
Operate, configure, tune, and maintain security controls and technologies (e.g. endpoint, network, SIEM, DLP)
Conduct threat hunting, alert investigation, triage, escalation, and incident response activities
Support vulnerability management processes from detection through remediation and verification
Assist with containment, recovery, and post‑incident activities
Execute application security activities, including penetration and security testing
Maintain and improve security monitoring, logging, and reporting capabilities
Support compliance with policies, regulations, audit requirements, and industry best practices
Produce and maintain documentation for systems, processes, and operational procedures
Deliver business‑as‑usual security operations in line with defined KPIs and SLAs
