- Audit current security tooling, pipeline coverage, and cloud posture to create a prioritized roadmap.
- Ship developer-facing security tooling, including CI/CD checks, secrets scanning, and vulnerability tracking.
- Perform structured risk assessments across product and infrastructure.
- Establish security policies and guardrails for AI usage in engineering workflows.
- Implement baseline detection, logging, alerting, and incident response processes.
- Develop internal security platforms and reusable security libraries.
AWSJavaC+++3 more