• Work closely with engineering and product teams as a trusted security partner, helping teams ship securely without unnecessary friction. • Design and implement secure-by-default patterns, SDLC guardrails, and secure primitives (“paved roads”) that reduce the need for manual security reviews. • Contribute to and review code in shared repositories that include customer-facing applications, APIs, infrastructure, and internal tooling. • Identify, prioritize, and drive remediation of security risks across application and cloud environments, with a strong emphasis on AWS and Kubernetes. • Help define practical security standards and explain the why behind them, building understanding, trust, and shared ownership with developers. • Improve automated guardrails and security review capabilities (e.g.policy-as-code, CI/CD controls, Kubernetes controls) to catch issues early while minimizing noise. • Take ownership of product-level security posture for Thoughtful systems while collaborating with the broader security team on shared tooling and strategy.