Build practical defensive security capabilities including security monitoring, threat detection, vulnerability management, endpoint protection, SIEM operations, and incident response.