• Define and lead the DevSecOps vision and roadmap across infrastructure, application, and CI/CD ecosystems. • Architect secure-by-design cloud-native systems across AWS/GCP environments. • Establish security patterns, guardrails, and reference architectures for engineering teams. • Evaluate and implement modern security tooling across SAST, DAST, SCA, container scanning, IaC scanning, and runtime protection. • Embed security controls into CI/CD pipelines and developer workflows. • Drive infrastructure-as-code security best practices (Terraform, CloudFormation, etc.). • Automate security testing and compliance checks to reduce manual overhead. • Implement policy-as-code and automated governance controls. • Lead identity and access management (IAM) strategy and least-privilege enforcement. • Strengthen container and Kubernetes security posture. • Oversee secrets management, encryption standards, and key management processes. • Partner with infrastructure teams on network segmentation, zero-trust architectures, and environment isolation. • Support and mature Alto’s security program in alignment with HIPAA, SOC 2, HITRUST, and other healthcare regulatory frameworks. • Conduct threat modeling, security design reviews, and architecture risk assessments. • Partner with Security and Compliance teams on audits and remediation efforts. • Provide senior-level leadership during security incidents, including root cause analysis and long-term mitigation planning. • Mentor senior and mid-level engineers on secure coding and DevSecOps practices. • Influence engineering leadership and executive stakeholders on security strategy and risk prioritization. • Drive cross-functional alignment across Engineering, Product, IT, and Compliance. • Raise the overall security maturity of the organization through scalable frameworks and standards.