Designs and maintains automated, AI-enabled detection and response capabilities across enterprise security platforms. Integrates SIEM, EDR, SOAR, and threat intelligence technologies; analyzes security telemetry; develops and validates detection content and automation workflows; documents procedures and runbooks; and collaborates with SOC, threat intelligence, and incident response teams. The role also evaluates emerging security capabilities and supports continuous improvement of detection operations for a federal agency.