Collaboratively design, build, and maintain internal detection systems. Research and develop sophisticated detection capabilities and rules. Work with product teams to ensure effective telemetry. Lead the development of response tooling and write runbooks. Guide cross-functional teams in integrating telemetry, detections, and response procedures. Design security and operations metrics. Lead the response to security alerts, potential incidents, and customer security issues.