Perform second-line triage and incident response, lead investigations and post-incident improvements, build runbooks and automation, tune detection across cloud/SaaS/container environments, support Web3 product launches, and mentor peers while participating in 24/7 rotational coverage.