Strong working knowledge of network and cybersecurity domains and their telemetry and data sources - configuration and asset data, network telemetry, security findings, automation activity, control evidence, and service and adoption data - sufficient to interpret evidence across domains. Act as the accountable interpreter of authoritative data - configuration and asset data, network telemetry, security findings, automation activity, control evidence, service performance, and vendor and financial information - validating and stress-testing evidence rather than owning the production data platforms.