Design, implement, and operate cloud security architecture across multi-account AWS, Kubernetes, and Terraform-managed infrastructure. Build detection, protection, and automated remediation workflows; define zero-trust access and identity solutions; harden Kubernetes and cloud workloads; shift security left in CI/CD; partner with infrastructure teams and mentor engineers to embed security guardrails.

Own application-layer risk detection and remediation across consumer flows, GraphQL APIs, and internal tools. Build and operate AppSec tooling, manage HackerOne, run threat modeling and security design reviews, create CI guardrails, automate vulnerability triage with AI agents, and lead offensive testing and red team exercises to harden authentication, authorization, and cloud/container security.