• Partner closely with engineering and product teams to embed secure development practices across the entire software development lifecycle (SDLC). • Be the subject matter expert on application security, guiding the business in building secure, scalable and HIPAA-compliant software solutions. • Collaborate with product and IT engineering teams to design secure applications and features. • Educate developers on secure coding practices and security testing. • Conduct code reviews, threat models and risk assessments to identify and mitigate vulnerabilities early. • Perform internal penetration testing and support incident response for application-level issues. • Continuously monitor the threat landscape to proactively adjust defenses and strategies. • Develop and implement tools and frameworks to integrate security into CI/CD pipelines. • Work with teams to build and enforce secure SDLC controls in a fast-paced agile environment. • Own and enhance application vulnerability management and remediation processes. • Lead implementation of security policies, standards and remediation processes. • Work cross-functionally to balance security risks with business objectives and product timelines. • Participate in security incident response, forensic investigations and security incident postmortems related to applications and systems.

• Responsible for the acquisition of net-new security business within a given territory. • Proactively leverage SHI data, alongside partner information, to identify and generate sales opportunities. • Serve as a customer-facing subject matter expert to build a pipeline and close security deals. • Engage with Enterprise sales and technical teams to initiate the product sales cycle, qualify opportunities, and close open pipeline. • Guide customers through foundational governance best practices to allow for successful and scalable cloud adoption.

• Lead/Manage/Support by providing strategic subject matter expertise in designing, evolving, and validating analytic capabilities within a formal insider threat program. • Collaborate with stakeholder groups to align detection strategies with mission priorities and ensures that the analytic framework remains effective and aligned to emerging insider threat tactics and data sources. • Drive mission success by defining behavioral detection logic, developing advanced UEBA use cases, and building risk scoring models. • Utilize User Behavior Analytics deterrence, detection, and monitoring in a large and diverse operational environment, behavioral science expertise, expertise in Open-Source Intelligence (OSINT) techniques, and development of intelligence products.

• Create and maintain security architecture and engineering processes and procedures • Design of system architectures which meet established cybersecurity requirements and align with customer needs • This includes security requirements definition, documentation, and communication. • Development of security architecture requirements and implementation guidance based on analysis of NIST 800-53 and or other security control frameworks • Architect, design, implement, maintain, and operates information system security controls and countermeasures. • Provides techniques and patterns for securing integration with external security system vendors and/or cloud providers • Leads regular architecture and design reviews to ensure requirements implementation • Evaluates and plays an active role in life-cycle management of multiple security technologies • Identify security risks and control gaps within systems, designs, products, data flows, and processes; and recommend corrective architecture, integrations, controls, and operations • Lead the development of security requirements, architectures, and documentation to ensure security controls are seamlessly integrated into new technology deployments • Perform secure architecture and design reviews of new technology and security systems deployments, and collaborate with business teams to integrate secure-by-design principles into engineering projects and builds • Maintain a clear view of the overall security architecture roadmap and strategic plan • Leverage emerging technologies and advanced security practices to ensure EverCommerce is at the forefront of security for our solution groups and our customers • Build, maintain and mature security architecture metrics and reporting • Recruit, hire, train, coach and mentor security engineers and analysts • Additional duties as required and assigned