Monitor and investigate SIEM alerts, respond to incidents, validate attack surface exposures using penetration testing techniques, tune detection rules, communicate with clients, write cybersecurity reports, onboard clients, integrate log sources, and develop incident response playbooks. The role requires cloud security knowledge across AWS, Azure, and GCP, familiarity with MITRE ATT&CK, web application vulnerabilities, SIEM tools, and penetration testing technologies.

Monitor and investigate SIEM alerts, manage incidents through resolution, analyze attack chains, tune detection rules, assess attack-surface exposures, validate vulnerabilities using penetration-testing techniques, communicate with clients, write security reports, onboard clients, integrate log sources, and develop incident-response playbooks. The role requires shift work, including occasional weekends and public holidays, and supports cloud security operations across AWS, Azure, and GCP environments.