Supports the design, improvement, and operation of security detection and response capabilities. Monitors and investigates alerts, contributes to SIEM, SOAR, EDR, and cloud security workflows, builds detections and integrations, and develops runbooks, playbooks, dashboards, and automations. The role collaborates with security, engineering, product, customer experience, and legal teams while developing engineering skills through guided delivery, pairing, incident participation, and continuous learning.

Designs and operates identity and access controls across AWS, GCP, and Azure. Builds Terraform modules, policy guardrails, automation, and internal tooling to enable secure cloud access at scale. Leads technical design discussions, improves reliability, establishes IAM performance metrics, closes identity gaps, and mentors engineers. Collaborates with platform, security, and product teams to integrate secure-by-default controls and improve developer experience.