Design, build, and operate enterprise identity and endpoint security systems. Implement lifecycle automation, SSO/SCIM provisioning, phishing-resistant MFA, conditional access, endpoint hardening and EDR operations. Build automation and AI agents to reduce manual work, run the enterprise security program, monitor metrics, and partner on telemetry and incident response.

Own application-layer risk identification and remediation across consumer products and APIs. Build and operate AppSec tooling, Harden auth/authorization and GraphQL security, run HackerOne and offensive testing, lead threat modeling and security reviews, and build AI agents to automate triage and remediation while embedding secure-by-default practices into engineering workflows.

Design, operate, and improve cloud security for a multi-account AWS environment and Kubernetes clusters. Build detection, prevention, and automated remediation workflows, drive zero-trust access, shift-left security in pipelines, integrate cloud security tooling, mentor engineers, and partner with infrastructure teams on identity, networking, and secrets management.