Responsible for developing custom content within the Splunk SIEM, capturing use cases, developing correlation rules, managing Splunk data models, and providing expert guidance on new threats. Duties include analyzing logs, developing dashboards and reports, and mentoring junior staff.