Monitor and investigate security alerts, develop and tune SIEM detection rules, support incident response and threat hunting, and improve detection coverage. Assist with ISO 27001 and ISO 9001 audits, GRC processes, risk assessments, control reviews, documentation, and audit evidence management.