Leads threat modeling, security reviews, vulnerability management, cloud and Kubernetes security, IAM protection, policy-as-code automation, and detection and response operations. Partners with engineering and DevOps teams to secure products, CI/CD systems, software supply chains, and production infrastructure. Develops scalable security tooling, establishes secure cloud baselines, prioritizes remediation, investigates incidents, and translates architectural findings into actionable controls.