Lead security incident investigations, serve as Incident Commander, and improve response capabilities through automation and AI agents. Build Python orchestration pipelines, detections, threat signatures, and security guardrails. Investigate modern and AI-driven attacks across cloud, endpoints, identity, SaaS, and containers; perform malware analysis; collaborate with Legal, HR, Cloud, Data, and Product Security; and participate in on-call rotations.