- Own and maintain security tools by tuning policies, managing upgrades, fixing integrations, and retiring tools that are no longer needed.
- Manage endpoint security across Mac and Windows using Microsoft Defender, Intune, and Jamf Pro.
- Manage Netskope policies for web, SaaS, and data loss prevention.
- Harden identity in Okta and Microsoft Entra ID, including SSO, MFA, conditional access, privileged access, and admin access reviews.
- Set and enforce security configurations in Google Workspace, Slack, Atlassian, and other SaaS applications.
- Manage email security with Abnormal Security and Google Workspace controls, and support secrets and credential management in 1Password.
- Harden AI tools such as Claude, Gemini, and ChatGPT, including admin settings, connector and MCP controls, audit logging, and data protections.
- Build and tune detections in Google SecOps, respond to incidents, lead post-incident reviews, and participate in the on-call rotation.
- Track remediation of cloud and code findings from Wiz and Snyk, and partner with Engineering on AWS security and secure development practices.
- Automate security work with Python, APIs, and workflow tools; collect SOC 2 evidence, support client security reviews, assess vendor risk, and mentor teammates.