A security analyst focuses on monitoring, triaging, and responding to alerts using existing tools. A security engineer designs, builds, and improves those systems, including detection logic, automation, and infrastructure to reduce risk at scale.