• Reporting to the CISO, you build security engineering for Sysdig, end to end, across the full code-to-cloud lifecycle. This is a senior leadership role on the Trust & Security team. You'll lead a small, high-leverage team of senior and staff security engineers. This team's technical direction will be set by you, and you'll grow it through hiring and the development of senior talent. Additionally, you'll own the security-engineering roadmap, standards, and budget. • Set functional strategy with the CISO and senior leadership. Translate security strategy into operational plans and policy, cascade it across the function, and act as the final decision-maker for security-engineering standards, tooling, and practices. • Bring an AI-first mindset to security delivery. Use AI to deliver security capabilities that help engineering build better systems and write better code. • Make AI-assisted and agent-driven development safe across the org, use AI agents to scale security work itself, and defend the AI agents and workloads we run in production as first-class attack surface — work where the problems aren't clearly defined and established principles don't fully apply. • Partner with product. Go beyond feedback, bring thoughtful, hands-on guidance to the roadmap, using new capabilities first internally, then helping mature both our core cloud defense platform and our new AI workload protection. You'll be a true product partner, not just an internal user. • Represent security with executives and customers. Engage senior leadership and major customers on security matters of significance, reconcile diverse stakeholder views to drive outcomes, and serve as a key leader within the Trust & Security function. • Turn compliance into assurance. We maintain ISO 27001, ISO 27701, and SOC 2 Type II — but that's the floor. Your aim is continuous assurance of controls that not only meet the needs of the auditor but, more importantly, protect the trust of the customer. • Model how we lead. Champion Sysdig's values — Trust in the Team, Love our Customers, Dig Deeper — and act as a change catalyst who builds a culture of trust, ownership, and continuous improvement.

• Further development of the company-wide IT security strategy and technical roadmap • Design of modern security architectures with a focus on Cloud Security, Zero Trust and Security by Design • Responsible for the ongoing development and optimization of security solutions in hybrid IT environments • Advising IT teams and projects on security-related issues • Conducting security reviews, risk analyses and architecture assessments • Further development of security policies, standards and processes • Supporting vulnerability management, penetration testing and the continuous improvement of the security posture

• Own cloud and application security, including AWS security architecture, IAM, network security, and secure configuration management • Drive and continually improve application security practices, including secure coding guidance, threat modeling support, and automated security testing in the SDLC • Lead the incident response program, including playbook development, on-call readiness, threat detection, and response coordination • Manage vulnerability management processes, ensuring risks are identified, triaged, and remediated effectively with engineering teams • Maintain and evolve security tooling, including monitoring, logging, SIEM/alerting, and secrets management • Collaborate with engineering and platform teams to embed security considerations into design and architectural decisions • Contribute to the unified control framework, ensuring strong security foundations for ISO 27001 and SOC 2 • Own corporate and IT security, including endpoint management (e.g., MDM), identity and access management, and oversight of the external IT provider • Lead security reviews by our customers, acting as a confident, trusted partner to enterprise clients throughout their evaluation process • Stay ahead of emerging threats, technologies, and best practices to continuously uplift Apheris’ security posture

• Enabling teams to integrate the necessary activities and tools into their daily business operations • Be responsible for evaluation of service and creating security reports. • Working with specific teams and providing guidance on how the security finding can be addressed • Working closely with other members of Security community in the organization.