• Perform hands-on security work across the stack: code reviews, threat modeling, vulnerability hunting, and remediation in production services • Own end-to-end remediation for complex findings: from exploit proof-of-concept to code-level fixes and automated CI checks • Build and maintain developer-first security tools, automation, and self-service capabilities (SAST rules, IaC scanning, dependency/OSS policies, CI/CD gates) • Lead threat modeling sessions and secure design reviews for new product initiatives and platform changes • Collaborate with SRE and Platform teams to harden runtimes, secrets management, identity, and authentication flows • Mentor and coach engineers on secure coding, secure-by-default patterns, and incident learnings • Contribute to security metrics and visibility (vulnerability backlog, mean time to remediate, coverage of automated tests)