Security Operations Leadership: Experience leading SOC or MDR operations with accountability for outcomes, not just activity. Expected level: Expert: runs services at scale; sets operational standards; leads under pressure.

Service Management and SLA Discipline: Ability to operate to defined outcomes, SLAs, and governance cadence, with transparent reporting and issue management. Expected level: Advanced: builds predictable operations; prevents drift and unmanaged commitments.

Incident Management and Escalation: Strong capability in incident coordination, escalation management, and crisis decision-making. Expected level: Expert: calm under pressure; makes clear calls; drives resolution.

Detection Engineering and Continuous Improvement: Understanding of how to improve signal quality: tuning, coverage, false-positive reduction, and evidence-based improvement. Expected le...