Monitor and investigate security alerts across SIEM, EDR, identity, network, email, and cloud platforms. Triage threats, support incident response, analyze logs, manage vulnerabilities, tune detection rules, and coordinate with IT teams and external MDR providers. Maintain incident documentation, develop operational metrics, participate in exercises, and improve cybersecurity workflows through automation, scripting, and emerging technologies.

Manages cybersecurity governance, risk, and compliance activities, including risk registers, POA&Ms, vendor assessments, control mapping, policy development, audit readiness, exceptions, remediation, metrics, and executive reporting. Leads cybersecurity awareness, phishing simulations, training, outreach, and champions programs. Collaborates with technical and nontechnical stakeholders across a university system and uses AI and automation to improve security workflows and reporting.