Own cloud security posture across multi-account AWS and Kubernetes environments, including EKS, Istio, identity, PKI, encryption, and policy-as-code. Design security guardrails, harden platforms against compliance standards, develop detections, threat hunt, automate controls with Terraform and Python, and support incident response. Partner with engineering, AppSec, and GRC teams, produce compliance evidence, mentor teammates, and develop AI-assisted security automation.