Threat Detection & Anomaly Modelling: Build, fine-tune, and deploy ML models that detect anomalous patterns, novel attack variations, and stealthy TTPs mapped to MITRE ATT&CK across the full telemetry corpus - including predictive weak-point analysis that scores which assets or identities are most likely to be exploited next. Telemetry Pipeline Architecture: Design scalable, real-time pipelines that ingest, normalise, and correlate high-velocity security telemetry from EDR, WAF/ZTNA, PAM, cloud environments (AWS, Azure, GCP), and DevOps toolchains into a unified, enriched security data model.