Monitor SIEM and security platforms, investigate and prioritize alerts, respond to incidents using playbooks, support vulnerability management and forensic investigations, tune detection rules, identify monitoring gaps, and document findings and remediation. The role also maintains security procedures and collaborates with technical and non-technical stakeholders on threat mitigation.