Security Monitoring Incident Response Monitor security s using SIEM EDR and XDR tools Investigate and respond to security incidents end-to-end including containment and remediation Lead post incident analysis and document lessons learned Threat Detection Threat Hunting Perform proactive threat hunting using logs endpoint telemetry and network data Develop and tune detection rules aligned with MITRE ATTCK Convert threat hunting findings into new detection use cases Vulnerability Exposure Management Conduct vulnerability scans and assess risk severity Track remediation with infrastructure and application owners Validate fixes and ensure closure within defined SLAs Security Engineering Hardening Implement and maintain security baselines for Windows Linux Active Directory O365 and cloud platforms Harden endpoints servers network devices and cloud workloads Support purple team and security validation exercises Security Tools Platforms Operate and tune tools such as SIEM SOAR Microsoft Senti...