- Own SOC 2 compliance and maintain Drata.
- Lead ISO 27001 and ISO 42001 implementation.
- Manage customer security questionnaire process (SafeBase).
- Perform hands-on AWS remediation for Drata-flagged items.
- Oversee vulnerability management and scanner findings.
- Perform light secure code reviews, especially for AI/LLM features.
- Tune threat detection and mature incident response processes.
- Manage offensive security including pen tests and bug bounties.
- Handle access provisioning and de-provisioning.