Defensive security: SIEM, log monitoring, detection and SOC skills.