Monitor security telemetry, investigate and respond to incidents, perform vulnerability assessments, maintain incident response plans, audit systems and permissions, assess third-party risks, enforce security policies, and provide security training and compliance guidance.