Detection rules engineering skill for SIEM logic, alert design, telemetry mapping, tuning, and false-positive reduction.