• Provide expertise during incidents, document findings, and help improve protocols. • Help design, implement, and maintain Microsoft Sentinel and Defender security monitoring, including custom KQL queries and automation. • Participate in risk assessments for cloud platforms and resources. • Collaborate with security and IT teams to ensure alignment with security frameworks and organizational standards. • Maintain and upgrade servers and applications supporting security tools. • Monitor emerging threats and advise stakeholders on responses. • Configure and manage user permissions and roles for cloud platforms and resources. • Monitor cloud platforms for security threats; investigate and respond to security incidents. • Create procedural documentation for cloud security processes. • Remediate findings in cloud security tools. • Automate tasks using scripting languages (PowerShell, Terraform). • Perform special projects as needed.