Lead advanced security operations: escalate and resolve complex incidents, improve SIEM/EDR detection and automation, perform threat hunting and log analysis, mentor junior engineers, maintain runbooks, and support compliance and incident readiness exercises.

Support and maintain on-premises and cloud infrastructure (Azure, Microsoft 365, Windows Server). Monitor performance, troubleshoot incidents, manage user accounts and network settings (DNS, IP, routing), recommend upgrades, document standards, assist Level I engineers, and drive security and operational improvements.

Create and maintain user guides, knowledge base articles, training materials, and process documentation. Collaborate with subject matter experts, ensure accuracy and consistency, manage documentation repositories, develop templates and style guides, edit and proofread content, and deliver documentation on schedule while gathering feedback to improve quality.