• Design & Architecture: You will be the primary security voice in design reviews. You will perform threat modeling on new features, identifying architectural risks before a single line of code is written. • Code-Level Security: You will actively review Pull Requests and conduct deep-dive code audits. You won't just run scanners; you will manually analyze logic in our code to find complex flaws that automated tools miss. • Vulnerability Remediation: Unlike traditional security roles that only "report" bugs, you will help fix them. You will triage findings from our tooling and write production-ready patches to resolve vulnerabilities. • Secure Software Supply Chain: You will oversee the integrity of our build dependencies, ensuring that the open-source libraries we import (and the tools we use to build them) are secure. • Triage and fix security alerts from tools like Grype, Cycode, and Wiz. • Implement code fixes for security tech-debt across our stack. • Conduct Threat Modeling sessions for upcoming epics and features in our two-week sprint cycles. • Serve as a Subject Matter Expert on Kubernetes security primitives (RBAC, unprivileged containers, network policies) for the engineering team, owning metrics and definition of success, share best practices through workshops, reviews, and documentation. • Lead audits, incidents, and compliance reviews representing the engineering team with the wider security community in Veeam.