Provides second-level and Tier-3 managed security services, including SIEM and EDR administration, detection engineering, incident investigation, threat hunting, vulnerability assessment, and security analytics. Mentors analysts, develops playbooks and automated workflows, improves service processes, supports client accounts, delivers security briefings, and provides technical recommendations. Requires participation in 24/7 operations, including weekends, holidays, and overtime.