• partner with product and engineering teams to integrate security into architecture, design, and development processes • conduct threat modeling, security reviews, and risk assessments for new and existing products • deliver product release security documents, document cybersecurity status and process in accordance with regulations • identify, triage, and drive remediation of vulnerabilities in applications and infrastructure • support product-related security incidents and coordinate with internal stakeholders for resolution • educate developers and product managers on secure development practices and emerging threats • ensure products meet internal security standards and external compliance requirements (e.g., HIPAA, HITRUST, SOC 2, ISO 27001)