Support cyber engineering and security tool operations: Assist with the configuration, tuning, testing, maintenance, and operational support of security technologies such as SIEM, EDR, SOAR, vulnerability management, email security, identity, logging, and monitoring platforms. Familiarity with security monitoring concepts and common telemetry sources such as authentication logs, endpoint events, DNS/proxy logs, email security alerts, network events, or cloud/security alerts.