Designs and manages security controls for AWS and Kubernetes environments, including sandboxing, infrastructure-as-code, cluster hardening, threat modeling, audits, CI/CD security, incident response, and compliance. The role collaborates with engineering and infrastructure teams, mentors engineers, and advocates for cloud security practices across the organization.