Lead infrastructure and application security initiatives, managing secrets, dependency hygiene, and maintaining secure CI/CD practices. Own internal access controls and role management, enforcing least-privilege principles and improving how we grant, revoke, and manage permissions across environments. Monitor for suspicious activity; extend our audit tooling; grow coverage of logging and traceability.