Provides digital forensics and incident response support for clients experiencing or suspected of experiencing cyberattacks. Responsibilities include forensic investigations, malware and intrusion analysis, incident triage, threat hunting, containment, remediation guidance, evidence documentation, client consulting, tabletop exercises, security assessments, and on-call CSIRT support. The role also manages EDR and SIEM technologies, communicates findings to technical and nontechnical audiences, and conducts ongoing cybersecurity research.