Designs, implements, and matures IT security controls across identity, endpoints, SaaS, networks, email, AI, and corporate environments. Owns security posture management, Zero Trust hardening, technology evaluations, automation, SaaS and vendor risk assessments, access reviews, audits, AI governance, and incident-response support. Partners with IT, R&D, SecOps, and other stakeholders to scale security controls and operational standards.

Secure and automate CI/CD pipelines, integrate SAST/DAST and vulnerability management, configure and monitor WAFs, implement cloud security posture practices with tools like GuardDuty, Wiz, Orca and DataDog, manage security IaC with Terraform/CDK, build developer self-service security tools in the IDP, and collaborate across Infrastructure, Development, and Security teams to detect and remediate risks.