• Design and continuously improve detection and alerting controls, ensuring high fidelity and contextual relevance to reduce noise and enable rapid response. • Build, test, and automate incident response playbooks and runbooks, increasing efficiency and consistency across the incident lifecycle. • Drive prioritization of alerts using a data-driven, scalable triage framework, aligned with business impact and threat context. • Lead in-depth investigations, including root cause analysis and digital forensics, and convert findings into actionable insights to strengthen detection and resilience. • Proactively engage in threat intelligence and threat hunting, identifying new tactics, techniques, and procedures (TTPs), enriching existing controls, and feeding insights into the detection pipeline. • Own incident handling from detection to resolution, collaborating with engineering, IT, and business teams to contain, eradicate, and recover from threats. • Define and maintain operational metrics for incident response, using them to drive continuous improvement in speed, accuracy, and organizational readiness.