- Define, drive, and execute the long-term technical roadmap for Cloud, Container, and Edge Protection programs.
- Manage and maintain edge and bot protection (e.g., WAF, CDN, DDoS mitigation).
- Perform security-focused infrastructure reviews for new product releases and architectural changes.
- Implement and maintain monitoring and alerting tools to detect cloud and container-related vulnerabilities and misconfigurations.
- Own container image security, including vulnerability scanning, remediation, and building gating for production deployment.
- Collaborate with Infrastructure and Engineering teams to embed security into CI/CD pipelines and deployment processes.
- Partner with Application Security and Engineering to implement security controls identified during Threat Modeling.
- Lead initiatives around infrastructure-as-code (IaC) security and runtime protection to automate security controls and hardening.
- Identify security control gaps across cloud, container, and network infrastructure and drive them to resolution.
- Develop tooling or automation to support proactive remediation and continuous security validation.
AWSGCPKubernetes+2 more