• Monitor and secure our Azure + AWS environments, responding to incidents and remediating vulnerabilities • Design and implement Infrastructure as Code guardrails (Terraform, Bash, Azure CLI, AWS CLI, Jinja, CloudInit) • Embed security checks into CI/CD pipelines (GitHub Actions) • Build and manage secrets management, identity solutions, and key rotation • Partner with squads to ensure product features are secure and compliant by design • Investigate security breaches and document root cause and remediation steps • Integrate logging/monitoring with SOC/MDR vendor to ensure strong detection and response • Perform SAST/DAST testing and strengthen software supply chain security • Develop and implement an immutable infrastructure strategy • Build and execute a red team and blue team strategy to continually test defenses • Research security enhancements and make recommendations to leadership • Stay current on IT and security standards, advising the company on emerging risks