– Find vulnerabilities in web applications, databases, and encryption. – Mitigate attacks by fixing security issues – Perform audits periodically to ensure best security practices – Deploy endpoint prevention and detection tools to prevent malicious attacks – Handle clean-up in case attacks happen – Work with other IT operations to plan disaster recovery. – Work with team leads and HR to educate all the employees to detect suspicious activities.