• Implement and maintain secure CI/CD pipelines using Bitbucket Pipelines, AWS CodePipeline, and other automation tools • Develop secure “paved roads” including preconfigured Terraform modules, container images, and pipeline templates • Update the paved roads as security requirements and capabilities evolve • Contribute security requirements and standards to the Engineering Foundations • Create and maintain guardrails that enable developers to move quickly while automatically enforcing security standards • Build and maintain security scanning automation as part of CI/CD pipelines, including vulnerability scanning, static code analysis, and dependency checking • Build and maintain Security-as-a-Service offerings for internal use, e.g.: Reusable security tools and libraries • Build and maintain log ingestion pipelines and services to collect security-relevant data • Embed into software engineering project teams as an assigned security representative.