Analyze and correlate security data from multiple systems to detect, investigate, contain, and remediate cyber threats. Build and maintain SIEM rules, support incident response, perform root-cause analysis, develop dashboards and visualizations, and advise security leadership. Use threat intelligence, Mitre ATT&CK, and scripting (SQL/Python) to consolidate data and improve monitoring.