• SOC Operations & Management: Oversee and manage the day-to-day operations of the Security Operations Center, including monitoring, analyzing, and responding to security alerts and incidents. • Threat Detection & Response: Identify, investigate, and respond to cybersecurity threats using advanced monitoring tools, SIEM platforms, and other security technologies. • Incident Management: Lead or support incident response activities, including root cause analysis, mitigation, and post-incident reporting. • Custom Scripting & Automation: Develop and maintain custom scripts (e.g., in Python, PowerShell, Bash) to automate security processes, improve threat detection, and streamline incident response workflows. • Security Monitoring & Analysis: Analyze logs, network traffic, and system behavior to detect potential security breaches or anomalies. • Tool Implementation & Optimization: Support the deployment, configuration, and optimization of security tools such as SIEM, SOAR, IDS/IPS, firewalls, and endpoint detection and response (EDR) solutions. • Collaboration with Teams: Work closely with IT, DevOps, and other security teams to ensure consistent security practices and to implement protective measures. • Security Policies & Procedures: Participate in the development and maintenance of security policies, procedures, and best practices. • Training & Mentoring: Provide guidance and mentorship to junior team members and contribute to the continuous improvement of the SOC team.

• Participate in threat modeling exercises with engineering team members • Triage SCA/SAST/DAST/CSPM findings by eliminating false positives and providing well-vetted vulnerabilities to engineering teams • Support vulnerability management efforts for networks and infrastructure • Partner with engineering teams ensuring timely remediation of security findings • Perform security assessments, reviews, and internal penetration tests • Support application security programs and security team initiatives • Develop scripts and tools to automate repetitive security tasks, such as log analysis, patch management, and incident detection. • Build custom solutions to integrate security tools with existing systems using languages like Python, JavaScript, or Go.

• Monitor active threats, perform in-depth analysis of AI-related attack vectors (e.g., prompt injection, model poisoning), and lead the development of comprehensive remediation plans. • Monitor, audit, detect, and remediate critical security exposures across our cloud infrastructure. • Respond to security incidents and manage the end-to-end incident response lifecycle. • Implement advanced automation and AI agents for security tasks, including detection rule testing, auditing, metrics collection, and reporting to improve operational efficiency. • Work cross-functionally with engineering teams to architect secure, scalable solutions, including implementing security guardrails and governance for AI/ML workloads, and evaluating third-party security tools. • Serve as a recognized security expert in multiple specialty areas and maintain a strong awareness of the external threat landscape. • Drive the implementation of security, technical, and process improvements across the organization.

• Act as Product Owner, leading the evolution of one or more cloud security products • Manage the product lifecycle, from conception through continuous evolution • Define, prioritize, and maintain the product backlog • Translate business requirements into: • User stories • Acceptance criteria • Functional documentation • Work closely with: • Development teams • Architects • Tech Leads • Business stakeholders • Define and manage the product roadmap • Prioritize features with a focus on business value and user experience • Ensure delivery quality (Definition of Done and acceptance criteria) • Conduct alignment sessions with stakeholders and leadership • Manage dependencies and communication between teams • Support the creation of: • User guides • Functional documentation • Participate in agile ceremonies (Scrum, planning, reviews, etc.) • Monitor metrics, outcomes, and opportunities for improvement • Serve as the primary point of communication among involved areas