Lead global cybersecurity incident response, complex security investigations, EDR and email security operations, proactive threat hunting, threat intelligence, and detection engineering. Correlate endpoint, identity, network, cloud, and email telemetry; contain and remediate threats; improve security controls and playbooks; automate repetitive work; advise stakeholders; mentor analysts; and participate in an after-hours on-call rotation.