• Investigate and validate alerts escalated from our security partners using SIEM, EDR, and other security tools. • Execute containment and remediation steps for confirmed incidents. • Escalate to Tier 3 when deeper forensic or threat hunting expertise is required. • Correlate data across multiple sources (network, endpoint, cloud) to identify patterns and indicators of compromise (IOCs). • Work with engineering and Tier 3 teams to fine-tune detection rules and reduce false positives. • Document SOC workflows, procedures, and incident handling processes. • Build and maintain runbooks to standardize response actions and improve operational efficiency. • Stay current on emerging threats, vulnerabilities, and security technologies.