• Monitor, analyze, and triage security alerts across various customer environments. • Rapidly respond to active attacks to mitigate risks and prevent further impact. • Escalate incidents where a conclusive determination cannot be made (real threat or false positive). • Perform threat detection, investigation, and response activities using Microsoft security solutions. • Work with technologies including Microsoft Sentinel, Microsoft 365 Defender suite, and Microsoft Defender for Cloud. • Assist in improving detection rules, monitoring processes, and incident handling workflows. • Maintain awareness of emerging cyber threats, attack vectors, and best practices. • Document incidents, actions taken, and recommendations for further remediation.