Leads product security incident response for post-release vulnerabilities, coordinating investigations, remediation, release fixes, CVE scoring and coordinated disclosure. Partners with engineering, product, release, customer-facing, and external security teams during significant incidents. Conducts exploit analysis, validates mitigations, authors postmortems, and improves secure development practices and SDLC processes.