Research and develop new threat detection, use cases based on emerging threats, threat intelligence research and Threat Detection Analyst feedback. Work with DLA stakeholders and cybersecurity tool SMEs to identify gaps in security protection and analytics capabilities. Develop custom scripts to enhance SIEM functionality. Review the quality of data feeds and recommend and/or implement improvements. Collaborate with stakeholders to identify critical systems and application components to develop alerting priorities and create signatures tailored to individual programs and applications