Test controls in operational cybersecurity and data-risk areas, including IAM/PAM and Active Directory; network security and firewalls; cloud security architecture and WAF; Security Operations, incident response, and SIEM/XDR/SOAR; vulnerability management and CTI; data protection and privacy, including DLP, encryption, and key management; and application security and Secure SDLC. Inspect and test technical and architecture evidence, including configurations, access records, scan results, change records, logs, encryption, certificates, and documented exceptions in the assigned specialty, such as IAM/PAM, Active Directory, firewalls and network security, cloud/WAF, SIEM/XDR/SOAR, DLP, key management, or vulnerability controls.