• Observe and study SOC practices first-hand such as alert investigation and threat hunting, internalize required context, and extract patterns for automation and tooling. • Build, extend, and maintain security-focused AI agents, tools, and workflows that support alert investigation, threat hunting, and response automation across the SOC lifecycle. • Translate complex security workflows and analyst behaviors into scalable automation primitives that power autonomous SOC capabilities. • Rapidly prototype and iterate on new tooling, integrations, and platform features based on real operational feedback. • Collaborate cross-functionally with product, research, and engineering to ensure tools meet both user needs and architectural standards. • Communicate insights and trade-offs to both technical and non-technical stakeholders, helping shape product and operational direction.