Leads complex security investigations from detection through resolution, including threat analysis, containment, eradication, recovery, root cause analysis, threat hunting, vulnerability management, and attack-chain reconstruction. Develops incident response playbooks and SOPs, writes executive reports, mentors Tier I analysts, and participates in on-call coverage. Requires advanced Windows, networking, scripting, malware analysis, SIEM, digital forensics, and incident response capabilities.

Support client CMMC and cybersecurity compliance engagements by reviewing documentation, validating technical controls, collecting evidence, maintaining SSPs and POA&Ms, assessing gaps, communicating findings, and preparing audit-readiness reports. The role involves working with clients, executives, engineers, and senior compliance staff while developing expertise in CMMC, NIST, and DFARS requirements.