Analyzing web applications for security vulnerabilities, monitoring network traffic, responding to security incidents, developing best practices for information security, conducting threat research.