What You’ll Actually Be Doing

Setting Direction, Not Just Following It
+ Provide strategic and tactical technical guidance that shapes how we approach security across the organization — with real input into leadership decisions
+ Research emerging threats, new attack techniques, and novel mitigation approaches, then translate that research into actionable guidance before those threats hit our doorstep
+ Own escalations that require deep expertise — you’re the person the team calls when things get interesting



Secure SDLC & AppSec Program
+ Design and evolve our secure software development lifecycle — threat modeling, security design reviews, developer enablement, and the toolchain that ties it all together
+ Integrate modern security tooling (SAST, DAST, SCA, secrets detection) into CI/CD pipelines in ways engineers actually embrace rather than route around
+ Build and run security champions programs that make developers your allies, n...