Monitor Security Operations Center (SOC) alerts & incidents Conduct threat analysis, vulnerability assessments, and risk mitigation Respond rapidly to security breaches & coordinate containment Develop and update cybersecurity policies and protocols