Investigate, triage, analyze, qualify, document, and escalate cybersecurity alerts in SIEM tools. Conduct log queries, follow up on incidents, write concise investigation reports, recommend process improvements, and support basic automation. The role operates within a 24/7 MSSP environment on rotating morning, afternoon, night, and weekend shifts, with training provided.