• Partner with infrastructure and engineering teams to embed security into development workflows and promote secure-by-default patterns • Build Terraform modules with built-in security guardrails, such as logging, encryption, and automated threat detection enablement • Deploy cloud-native detection capabilities using AWS GuardDuty, Security Hub, and custom detection rules to identify credential compromise, crypto-mining, and lateral movement • Maintain SOC 2 Type II and ISO 27001 compliance through automated collection of cloud control evidence • Conduct security audits of cloud resource configurations using tools like AWS Config and Open Policy Agent, and remediate deviations from CIS Benchmarks and our internal security policies • Secure CI/CD and supply chain pipelines by implementing controls such as artifact signing, secret scanning, and dependency monitoring • Apply zero trust principles through strict network segmentation, authentication, and authorization across our cloud environments • Participate in the security on-call rotation and respond to security alerts and incidents to ensure rapid mitigation and root cause analysis