Monitor and investigate security alerts across SIEM and EDR platforms, analyze logs and phishing or malware activity, classify true and false positives, and respond to incidents using established playbooks. Escalate high-severity incidents, support vulnerability assessments and remediation tracking, maintain SOC documentation, apply threat intelligence, meet SOC SLAs, and assist with baseline security reviews and security configuration gap analysis.