Security operations and incident response
Prepare a walkthrough of how you would triage a security incident and tune a SIEM query to reduce false positives.
The Cybersecurity role covers incident triage and response and SIEM query development and tuning.
Source posting