Background in cyber threat research, threat modeling, threat hunting, detection engineering, or previous experience in data-driven risk analysis, fraud detection, adversary profiling and targeting, actuarial risk, or close collaboration with these types of teams to understand risk analysis and investigation processes. Data engineering experience, including building and operating pipelines over large-volume event data: SQL, columnar or search-backed stores (OpenSearch/Elasticsearch, Athena/Presto, or similar), plus schema evolution, backfills, and data quality validation.