Senior individual contributor owning cloud security architecture for GCP. Design edge/perimeter defenses with Cloudflare and Cloud Armor, build policy-as-code and secure Terraform modules, lead threat modeling and security reviews, advance cloud detection and incident response, translate compliance requirements into technical controls, mentor engineers, and serve as the cloud security technical authority.

Lead application security efforts end-to-end: own vulnerability management, API and supply chain security, integrate security into design reviews and CI/CD, develop automation and tooling (SAST/SCA/DAST/container/dependency), perform threat modeling, triage vulnerabilities, and support incident response and remediation across engineering teams.

Build and maintain automation and integrations for continuous control monitoring and evidence collection. Run and coordinate SOC 2, ISO 27001, and SOX audits, map controls, track remediation, and maintain audit-ready documentation. Conduct risk assessments, manage the enterprise risk register, support third-party risk, and partner with engineering and business stakeholders to translate compliance into engineering-focused controls and tooling.