Lead end-to-end incident response: triage, containment, evidence capture, and root-cause analysis. Build SOAR automation with Tines, tune detections in CrowdStrike and SIEM/SOAR, monitor data risks with Cyberhaven DLP, partner on secure cloud telemetry and playbooks, evaluate emergent threats, and participate in incident on-call rotation while coordinating cross-functional remediation.

Lead and scale the product security program by embedding security into the SDLC, performing threat modeling and architecture reviews, building security-as-code tooling and CI integrations, conducting application/cloud/mobile testing, mentoring engineers, and driving remediation and security ownership across product teams.