Intermediate experience using several of the following tools preferred: SIEM (e.g., Splunk), EDR/XDR (e.g., Microsoft Defender, Cortex XDR), firewall management platforms (e.g., Palo Alto Panorama/PA firewalls, Cisco firewalls), vulnerability scanners (e.g., Tenable), email/phishing security tools (e.g., PhishER), IDS/IPS, packet capture tools, network monitoring systems, log analysis platforms, ITSM/ticketing systems, and cloud security or infrastructure monitoring tools. Analyze logs, endpoint telemetry, authentication records, firewall events, DNS activity, proxy logs, packet captures, and network flow data to identify security threats, operational issues, and performance concerns.