Monitor, investigate, triage, and respond to security alerts and incidents in a hybrid-cloud environment. Maintain EDR, SIEM, vulnerability scanning, and other security technologies; review logs, analyze events, support vulnerability management and incident response, conduct compliance reviews, document findings, deliver security awareness training, and participate in on-call and weekend support rotations.