• Partner with the lead security engineer to identify risk, build controls, and drive security initiatives across the organization • Perform security assessments, penetration testing, and code reviews to find and remediate vulnerabilities across our applications and infrastructure • Integrate security tooling and controls into CI/CD pipelines and software development workflows, shifting security left without slowing teams down • Help design and enforce cloud security architecture across our AWS environment, including IAM, WAF, network segmentation, encryption, and runtime threat detection • Develop and continuously improve security monitoring, logging, and alerting capabilities to support incident detection and response • Participate in the security on-call rotation and assist with incident response and investigation as needed • Contribute to compliance efforts across SOC 2, GDPR, CMMC/NIST, etc., including audit support and policy development • Help secure AI/ML pipelines, model training infrastructure, and model artifacts including weights and deployment code • Build and maintain internal security tooling and automation to scale our program without scaling headcount • Partner with engineering, infrastructure, and IT to embed security practices directly into development and delivery workflows