Act as Level 3 escalation in an MDR/SOC, leading complex incident investigations, threat hunting, detection tuning and remediation. Provide technical guidance to L1/L2 analysts, improve detection logic and security monitoring, support customer-facing optimisation, and document and report investigation findings to strengthen customer security posture.