Independently investigate security alerts and incidents using SIEM, EDR, and other security monitoring tools to analyze suspicious activity, determine potential impact, and support appropriate response actions. Demonstrated leadership experience in a cybersecurity operations environment, including coordinating technical workloads, providing guidance and feedback, supporting analyst development, evaluating performance, and addressing operational or performance-related issues.