Design, implement, and maintain AWS security controls and monitoring (GuardDuty, CloudTrail, Security Hub). Manage IAM and federated identity (Okta), secure networking, containers, serverless, and Databricks on AWS. Investigate and remediate findings using Wiz, support SOC 2 compliance, automate security via IaC and scripting, and develop incident response playbooks while partnering with engineering and auditors.