• Work alongside DevOps and engineering teams to ensure our platforms, repositories and CI/CD pipelines are secure by default while remaining easy to build, test, and deploy against • Identify security risks through tools, audits, and monitoring, and drive them to resolution — whether that means changing a policy, updating infrastructure, or improving a pipeline • Take ownership of the security posture across multiple AWS accounts and continuously improve it over time • Design and maintain security guardrails around IAM, logging, monitoring, and encryption • Manage repository-level security scanning (SAST, dependency scanning, secrets detection) using tools such as Aikido or similar, and ensure findings are actionable • Partner with DevOps teams to secure Kubernetes clusters, with a strong focus on Rancher • Improve security visibility through monitoring, logging, and reporting • Automate security controls and validations using Infrastructure as Code and scripting • Help document security standards, patterns, and operational runbooks