Support the development of detection rules and threat hunting activities using threat intelligence. Incident Response Investigate security alerts and assist with incident response activities, including triage, containment, recovery, and post-incident reviews.

Analyze real-time security events across end-point, network, and cloud environments using a centralized analyst console and SIEM/Google SecOps platform. Conduct host and network forensic analysis to support incident response efforts, understanding attacker activity, and assessing customer impact.

Investigate potential cases - Analyze security incidents to demonstrate product value, refine detection logic, and deliver actionable findings.