• Take ownership of cloud security work across GCP and Azure, from design through day-to-day execution, working closely with infrastructure, platform, data, and application teams. • Run our data security and vulnerability management efforts, including DLP, sensitive data discovery, and remediation tracking across both cloud environments. • Build and maintain security automation using IaC (Terraform) and CI/CD pipelines so security controls are consistent, auditable, and easy for engineering teams to adopt. • Own and evolve our cloud security posture tooling (Wiz) tuning policies, investigating real risks, cutting down noise, and driving fixes that actually reduce exposure. • Regularly review cloud configurations, identify gaps, and fix issues before they turn into incidents, while owning infrastructure security controls tied to PCI and SOC 1/2. • Write and maintain clear cloud security standards and runbooks that engineers can actually follow. • Improve detection and response by building practical detections and response playbooks in Chronicle SIEM. • Act as a senior escalation point during incidents, helping teams triage, contain, and resolve cloud security issues. • Mentor other engineers and help raise the overall security bar without creating friction or silos.