Lead threat intelligence efforts by collecting, enriching, and operationalizing IOCs and threat data; operate TIPs (e.g., MISP), automate ingestion and integrations with SIEM/SOAR/EDR, produce intelligence reports, support IR, hunting, detection engineering, and build dashboards to measure intelligence effectiveness.