Protect and improve the company's security posture by responding to and investigating security events (SIEM, EDR, email, identity, cloud, network), performing triage and root-cause analysis, and converting adversary insights into detections, mitigations, playbooks, and measurable defensive improvements. Collaborate with global security, IT, red team, threat intelligence, and engineering teams, support vulnerability assessments and incident readiness, and measure detection quality and response readiness.

Respond to and investigate security alerts across SIEM, EDR, email, identity, cloud and network; drive incident triage, evidence collection, and remediation. Build and test detection logic, map detections to MITRE ATT&CK, improve telemetry and controls, support vulnerability assessment and purple-team exercises, and document lessons learned and playbooks to strengthen defenses.