Lead the content and logic for an autonomous investigation platform: define investigation playbooks, telemetry/schema requirements, disposition and suppression logic, integrate threat intelligence, track quality metrics, and partner with MDR operations to scale ML-driven investigations that replace manual Tier 1-2 triage.