Staff software engineer responsible for designing, building, and operating production authorization services. The role develops role-based, attribute-based, and policy-driven access controls; leads security reviews; builds cloud-native microservices and APIs; establishes engineering standards, observability, and deployment practices; mentors engineers; and supports critical systems through on-call rotations.

Performs offensive product security assessments, penetration testing, vulnerability research, and exploit validation across embedded vehicle software, mobile applications, backend systems, and product services. Identifies attack paths and vulnerabilities, validates impact, provides risk-ranked remediation guidance, and partners with engineering teams to improve secure SDLC practices. The role also develops offensive tooling and testing methods.