• Conduct security reviews and threat modeling for new product features • Partner with engineering teams to embed secure development practices • Improve vulnerability management and security scanning processes • Help integrate security tools such as SAST and dependency scanning • Manage and tune our Web Application Firewall (WAF) • Monitor logs and alerts to identify suspicious activity • Investigate and respond to security incidents • Improve detection, logging, and alerting across our platform • Drive implementation of SSO and centralized identity management • Design and enforce least-privilege access controls • Establish RBAC policies and support access review processes • Help define the company’s security roadmap • Establish measurable security KPIs and reporting • Evaluate and recommend security tools and controls • Collaborate with leadership on security and privacy considerations • Support security best practices across engineering and infrastructure • Lead MDM implementation (Jamf, Kandji, Intune, or similar) • Support day-to-day security tooling maintenance

• Implement and maintain network security controls including firewall rule updates, segmentation enforcement, VPN configurations, and secure remote access support. • Support firewall governance processes including access reviews, rule validation, and policy cleanup initiatives. • Deploy and manage endpoint security tools including EDR/XDR agents, host-based firewall policies, and system hardening configurations. • Support PKI operations including certificate issuance, renewal, and troubleshooting encryption-related issues. • Administer identity and access controls across Active Directory and cloud identity platforms, including MFA enforcement, RBAC implementation, and access reviews. • Implement and monitor Cloud Security Posture Management (CSPM) controls to identify misconfigurations, excessive permissions, and compliance gaps across AWS, Azure, and/or GCP. • Investigate and remediate cloud security findings related to IAM exposure, storage misconfigurations, logging gaps, and configuration drift. • Execute DAST and SAST scanning activities, analyze application security findings, and support remediation efforts in partnership with development teams. • Support application security efforts by validating vulnerability remediation and retesting identified issues. • Monitor security alerts in collaboration with Security Operations and assist with incident investigation and containment. • Perform vulnerability scanning across infrastructure, cloud workloads, and web applications; track remediation to closure. • Review system and cloud configuration changes for security impact and ensure alignment with hardening standards. • Develop and maintain scripts (PowerShell, Python, etc.) to automate monitoring, reporting, and validation of security controls. • Maintain documentation, runbooks, and audit artifacts to support compliance and governance requirements.

• Design, implement, and maintain enterprise network security architecture including firewalls, segmentation, IDS/IPS, VPN, and secure remote access solutions • Lead firewall rule reviews, optimization, and policy governance to ensure least-privilege and secure network access controls • Engineer and manage endpoint security solutions including EDR/XDR, host-based firewalls, disk encryption, and endpoint hardening standards • Architect and maintain Public Key Infrastructure (PKI), certificate lifecycle management, and encryption strategies for internal and external systems • Design and support enterprise identity and access management (IAM) controls including Active Directory, Azure AD/Entra ID, SSO, MFA, conditional access, and privileged access management (PAM) • Serve as subject matter expert for Active Directory security, including GPO design, delegation models, tiered admin architecture, and AD hardening • Implement and monitor secure proxy solutions, web filtering, CASB, and secure web gateway technologies to protect outbound traffic • Develop and optimize security monitoring and detection capabilities in collaboration with the SOC, including log integration, alert tuning, and incident triage support • Lead incident response investigations, perform root cause analysis, and recommend long-term control improvements • Secure cloud environments (AWS/Azure/GCP) including network security groups, IAM policies, logging, workload protection, and cloud posture management • Demonstrate deep understanding of network protocols (TCP/IP, DNS, DHCP, HTTP/S, SMTP, LDAP, Kerberos, SNMP) and their security implications • Conduct vulnerability assessments and remediation coordination across infrastructure, endpoints, and cloud platforms • Develop automation scripts using PowerShell, Python, or similar tools to improve security operations efficiency and reduce manual tasks • Review architecture designs and system implementations to ensure security-by-design principles are embedded early in projects • Mentor junior engineers and provide technical leadership on complex cross-domain security initiatives.

• Develop and execute field-level strategies to grow Arxada’s poultry segment and expand market share. • Support the positioning and adoption of new biosecurity innovations in the field. • Lead field trials, including trial design, setup, implementation, and conversion into commercial business. • Build and maintain strong relationships with integrators, applicators, and distributors. • Provide timely, hands‑on technical support to customers and integrators. • Collaborate with cross-functional teams including Marketing, TS&D, R&D, Product Management, Supply Chain, and Customer Service. • Travel approximately 60%, with seasonal peaks requiring increased presence.