Supports the design, improvement, and operation of security detection and response capabilities. Monitors and investigates alerts, contributes to SIEM, SOAR, EDR, and cloud security workflows, builds detections and integrations, and develops runbooks, playbooks, dashboards, and automations. The role collaborates with security, engineering, product, customer experience, and legal teams while developing engineering skills through guided delivery, pairing, incident participation, and continuous learning.