The role focuses on 24x7 SOC monitoring, real-time threat detection, and leading incident response activities. Secondary duties include security engineering to mature detections, tune tooling, and harden the environment across cloud and on-premise infrastructure.
