Lead cloud security direction and standards across AWS, GCP, and self-managed Kubernetes. Own threat modeling, secure architecture, detection engineering, incident response, and vulnerability management. Harden IaC and CI/CD (Terraform), secure Kubernetes control plane and runtimes, and mentor other engineers while driving cross-functional security initiatives and tooling adoption.

Design, implement, and manage enterprise security solutions including endpoint, network, SaaS, and cloud protections. Investigate malware and advanced threats, expand SIEM detections, deploy DLP, perform forensics and vulnerability remediation, secure IAM/SSO/MDM, automate detections and reporting, participate in on-call incident response, and mentor junior security engineers.