Hands-on security operations role: lead monitoring, triage, and incident response with an external SOC/MDR. Maintain CSPM/SAST/DAST tooling, manage vulnerability and penetration testing programs, perform internal security audits and ISO 27001 risk assessments, and produce findings, risk registers, and audit-ready reports.