• Monitor, investigate, triage, and respond to security alerts generated from SIEM, EDR, firewalls, email security, cloud platforms, and other security tools. • Perform advanced network analysis, including packet capture review, flow analysis, and traffic anomaly detection. • Conduct log analysis across diverse systems (cloud, endpoint, network, identity, and applications). • Assist with EDR investigations and response actions using tools such as SentinelOne (preferred). • Analyze threats, malware behavior, and attack patterns to determine risk and recommend or implement remediation steps. • Collaborate with internal teams to improve detection rules, alerting logic, and data enrichment within Google Chronicle or other SIEM technologies. • Develop, maintain, and optimize SOC playbooks, runbooks, and escalation procedures. • Assist with SOC process improvements, automation opportunities, and overall operational efficiency. • Participate in On-Call rotation