Design, automate, and maintain security controls, detection, and remediation systems; evaluate security technologies; perform risk assessments and threat models; partner with engineering for secure development; lead incident response and support compliance (SOC 2, ISO 27001); manage bug bounty and vulnerability disclosure programs.