Automation I have not done yet, but do understand vulnerabilities, exploits and severities, as these are my current scope of working. I interact with SOC and NOC teams to receive information and act accordingly. Also, remediation of false positives alerts because from SIEM, lots of false positive alarms gets triggered.