• Design and implement scalable, developer-friendly security solutions that integrate directly into engineering workflows • Lead threat modeling, design reviews, and code reviews for new features and major product launches • Build and evolve secure-by-default frameworks for authentication, authorization, input validation, and secrets management • Develop and integrate automated security tooling into CI/CD pipelines (e.g., linters, dependency scanners, policy enforcement) • Collaborate with product and engineering teams to remediate vulnerabilities, and contribute to incident response and postmortems • Own, manage, and improve our third-party penetration testing engagements and bug bounty program, working closely with external security researchers to identify and resolve vulnerabilities • Stay current on emerging threats and attack techniques, and drive ongoing maturity of our application security posture