• Architect, design, and implement secure, compliant, scalable, and cost-efficient infrastructure solutions to protect a rapidly growing product. • Lead the execution and maintenance of our SOC2 compliance program and other security-related certifications. • Design, implement, and audit Role-Based Access Controls (RBAC), Identity and Access Management (IAM), and secrets management systems. • Design and implement security best practices for backend, frontend services, APIs, and data pipelines. • Own security features end-to-end, from architecture and implementation to testing and production deployment. • Develop and maintain security automation, Infrastructure as Code, and secure CI/CD pipelines. • Implement and manage security monitoring, threat detection, and vulnerability management across our cloud infrastructure. • Establish and enforce security best practices for authentication, authorization, logging, and alerting. • Lead and participate in incident response, troubleshooting complex security issues and driving postmortem learning and improvements. • Collaborate across engineering teams to embed security into the software development lifecycle and balance compliance, velocity, and cost.