Supports the design, improvement, and operation of security detection and response capabilities. Monitors and investigates alerts, contributes to SIEM, SOAR, EDR, and cloud security workflows, builds detections and integrations, and develops runbooks, playbooks, dashboards, and automations. The role collaborates with security, engineering, product, customer experience, and legal teams while developing engineering skills through guided delivery, pairing, incident participation, and continuous learning.

Design, build, and operate production security capabilities for threat detection and response. Develop detection, monitoring, automation, and response workflows across SIEM, SOAR, EDR, and cloud security platforms. Improve detection coverage, control effectiveness, and operational reliability while applying AI safely to security engineering. Lead complex technical initiatives, collaborate across security and engineering teams, and communicate technical risks and trade-offs clearly.

Designs and operates identity and access controls across AWS, GCP, and Azure. Builds Terraform modules, policy guardrails, automation, and internal tooling to enable secure cloud access at scale. Leads technical design discussions, improves reliability, establishes IAM performance metrics, closes identity gaps, and mentors engineers. Collaborates with platform, security, and product teams to integrate secure-by-default controls and improve developer experience.