Develops and improves security controls by simulating adversary tactics, analyzing results, and creating detection rules for SIEM/EDR/XDR platforms. Requires scripting and knowledge of Windows/Linux systems.