Analyzes security incidents, develops defense strategies, and provides expert consultation to clients, requiring strong SOC, SIEM, and SOAR knowledge.