• Define and evolve product security architecture and strategy for Valon’s multi-tenant SaaS platform • Architect and guide secure implementation of customer-facing security capabilities in conjunction with Engineering (e.g., authentication / authorization models, identity integration, access controls, audit and logging, encryption / key management) • Build and maintain security reference architectures and standardized secure design patterns for product teams • Lead threat modeling, security design and code reviews for new features, services, and major architectural changes • Collaborate with Product, Engineering, Data, Compliance, Legal, and other teams to identify and drive mitigation for product and data security risks • Support vulnerability triage, remediation strategy, and root cause analysis for product security issues • Support security compliance and regulatory needs (e.g., SOC 2, CCPA, NYDFS, FTC), including customer-facing security discussions and due diligence • Develop, implement, and enforce security policies, standards, and procedures • Support operational activities including security advisory and consultative reviews, incident response, issue remediation, and other security processes

• Execute risk assessment testing supporting the Risk Manager. • Document risk assessment results. • Support Risk Manager in drafting risk assessment reports. • Perform administrative management of risk register (additions/editions/deletions, etc). • Document risk acceptance/exemptions that have been approved per the program. • Manage quarterly/annual review of risk acceptance/exceptions. • Manage risk assessment results in relevant dashboards. • Document Issues and Remediation activities for all exceptions noted during risk assessments. • Perform quarterly compliance assurance testing. • Document compliance testing results. • Maintain Management Action Plan (MAP) catalog with due dates. • Manage monthly audit MAPs. • Provide administrative support for ad-hoc external audits. • Provide administrative support for internal audits. • Support compliance program reporting activities.

• Define and maintain observability architecture and strategy, aligned with resilience and regulatory requirements; • Design and configure dashboards, SLOs/SLAs, and alerts for different stakeholders; • Develop scripts and automations for advanced administration and monitoring (Dynatrace, Python, Workflow); • Implement observability extensions and tools for non-native technologies and integration with OpenTelemetry; • Analyze data, optimize queries, and extract key business and capacity/performance management metrics; • Efficiently manage resources and licenses in Dynatrace DPS, ensuring compliance with DORA requirements.

• Conduct regular security assessments and audits of cloud infrastructure and services • Monitor and respond to security events and incidents in cloud environments • Develop and maintain cloud security policies, standards, and procedures • Stay current with emerging cloud security threats and mitigation strategies • Develop and maintain Infrastructure as Code (IaC) - Terraform templates with embedded security controls • Implement, manage, and monitor endpoint security solutions in cloud environments, including tools such as Cortex XDR and SentinelOne • Configure, manage, and troubleshoot cloud-based firewall technologies • Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments • Collaborate with development teams to ensure security best practices are integrated into CI/CD pipelines • Provide technical leadership and mentorship to junior engineers, fostering a culture of continuous learning and improvement