Checkatrade

• Design and implement scalable security controls and platform-level guardrails across our multi-cloud estate: build it once, make it the default everywhere. • Drive a modern secure SDLC by embedding threat modelling, SAST/DAST/SCA, secrets management, and dependency hygiene directly into the developer workflow, not bolted on as an afterthought. • Prototype and deploy AI agents that review code, triage findings, and turn vulnerability noise into actionable signals, becoming the assistant every developer wishes they had. • Own the security of our IaC, CI/CD pipelines, and cloud platforms, making least privilege the default rather than a project. • Partner with engineering to deliver paved paths, libraries, and tooling that make the secure way the easy way. • Run technical security reviews for new applications and infrastructure changes, finding the issues that matter with the evidence to back it up.