Leads threat hunting, detection engineering, incident response, vulnerability management, and security platform ownership across endpoint, identity, network, cloud, application, and SaaS environments. Designs and operates security controls, automates workflows using scripts and APIs, manages incident response and assessments, improves network security, establishes metrics, and supports compliance with NIST, ISO 27001, SOC 2, and financial-services requirements. Mentors junior staff and advises cross-functional teams.