Define cloud security standards and reference architectures across AWS, GCP, and self-managed Kubernetes. Lead threat modeling, detection engineering, incident response, cloud forensics, IaC/CI-CD security (Terraform), vulnerability management, and mentor other engineers.

Lead design, implementation, and operational management of enterprise security controls: investigate malware and threats, expand SIEM detections, deploy DLP, secure SaaS and endpoints, harden configurations, run forensics and incident response, automate detections and reporting, and mentor junior engineers while participating in on-call rotations.