-Lead Incident Response, Threat Intelligence, Threat Hunting, Detection Engineering, Malware Analysis, Security Analytics. -Act as escalation owner for high‑severity and complex incidents. -Demonstrates strong people management skills by effectively leading teams, mentoring talent, and driving performance and accountability. -Demonstrates strong decision‑making capabilities during security incidents, enabling timely containment, risk mitigation, and effective resolution of incidents. -Drive RCA, CAPA, mock drills, tabletop exercises, cyber crisis simulations. -Establish threat intelligence, TTP‑based hunting, APT & ransomware monitoring. -Review SIEM use‑case lifecycle, alert quality and detection coverage. -Drive automation strategies like SOAR, BAS, deception, cyber range, automation initiatives. -Define and baseline the KPIs/KRIs, executive dashboards, leadership reporting. -Strong reporting capabilities to send key updates to CISO and senior leadership team. -Strong collaboration with other functions: Governance, PRC, TechOps; act as trusted advisors