Leads and develops a threat intelligence, threat hunting, and detection engineering team serving multiple customer environments. Owns the intelligence lifecycle, produces strategic and tactical intelligence, develops SIEM and EDR/XDR detections, conducts threat hunts, supports complex incidents, and briefs technical and executive audiences. Establishes ATT&CK coverage, automates workflows, partners with SOC and security engineering teams, and advises customers on threats affecting retail, hospitality, payments, and connected systems.