Hands-on experience operating security tools, including SIEM/XDR, endpoint protection, and vulnerability scanners (Nessus, Kenna, Nmap), and with alert analysis, triage, and patch coordination. Solid knowledge of network security (TCP/IP, DNS, firewall, VPN, IDS/IPS, network segmentation) and operating system security and hardening (Windows Server, Linux).