Lead and scale an AppSec team to embed security across the SDLC. Own the global application security roadmap, integrate automated testing into CI/CD, run threat modeling and architecture reviews, manage bug bounty and pentest programs, and partner with product, R&D, and GRC to ensure compliance with standards like SOC 2 and ISO 27001.

Secure and automate CI/CD pipelines, integrate SAST/DAST and vulnerability management, configure and monitor WAFs, implement cloud security posture practices with tools like GuardDuty, Wiz, Orca and DataDog, manage security IaC with Terraform/CDK, build developer self-service security tools in the IDP, and collaborate across Infrastructure, Development, and Security teams to detect and remediate risks.