• Formalize and deliver security product tuning requests to improve detection capabilities and overall efficiency. • Develop and maintain incident response use incidents, knowledge base articles, and other relevant documentation. • Coordinate basic forensics activities as needed. • Conduct after action reviews on high impact and otherwise noteworthy incidents to identify process and human capital improvements. • Aid in onboarding and mentoring new team members. • Drive and Implement continuous improvement, open communication, and sharing of knowledge. • Act as a primary subject matter expert for one or more security products. • Identify and resolve opportunities to automate repetitive tasks. • Proactively propose improvements for how to reduce risk and potential future incidents.