How do you act as an escalation point for complex security incidents and drive containment and remediation efforts?