• Define and enforce best practices for secure coding, dependency management, and design reviews across engineering teams • Integrate and manage SAST, DAST, and SCA tools within CI/CD pipelines (e.g., GitHub Actions) • Partner with developers on new features and systems to identify risks early in the lifecycle • Implement best practices for secrets handling, API authentication/authorization, and data protection • Build security guidelines, training, and reusable libraries/patterns so that teams can ship secure code faster • Triage and prioritize findings from bug bounties, penetration tests, and automated scans, ensuring timely resolution • Act as the bridge between application developers and platform engineers to align app security with infra and compliance requirements • Implement monitoring, alerting, and remediation for security incidents across our platform • Scan and remediate vulnerabilities in container images, OS packages, dependencies, and IaC templates • Design and maintain least-privilege IAM roles, secrets management, and authentication flows • Automate evidence gathering and control enforcement for SOC 2, ISO 27001, and others • Own strategy for application security tooling, automation, and developer enablement; collaborate with SREs, infra, and data engineers to keep platform secure and scalable