Own product security end to end, including vulnerability identification and remediation, secure SDLC practices, SOC 2 compliance, incident response, access controls, data protection, security tooling, vendor assessments, and audit readiness. Partner directly with engineering teams, review production code, strengthen security culture, communicate risk to leadership and external stakeholders, and support evolving compliance requirements such as ISO 27001.

Develop responsive web applications using modern front-end technologies, collaborate with designers, optimize performance, and ensure accessibility.