• Deploy and operate vulnerability scanning across our cloud infrastructure. Triage findings and drive remediation with engineering teams. • Lead security assessments for internal and customer security needs (e.g. SOC 2 Type II, ISO 27001, HIPAA audits). • Maintain vulnerability and remediation documentation for auditors. • Act as a liaison between product, engineering, compliance, and GTM to guide and prioritize the right security investments. • Perform penetration tests, tabletop exercises, DR testing, and incident response. • Manage endpoint security tooling as we scale; conduct audit log reviews and maintain visibility across our stack.