Security sucks, but I really do like pro-active monitoring and event management/incident response stuff in general, whether it's server/application performance metrics, storage metrics, circuit outages, or security stuff, along with automating various types of network inventorying and auditing...