Monitor, triage, and investigate security alerts; perform incident response and documentation; tune SIEM and endpoint protection; manage ServiceNow security incidents; support vulnerability remediation and compliance (NIST, GDPR, SOX); collaborate with global teams and participate in occasional on-call and travel.