Build and scale platform security through architecture reviews, threat modeling, IaC hardening, IAM improvements, Kubernetes security, and disaster recovery exercises. Develop automation for detection, response, compliance, onboarding, access anomaly detection, and self-service security posture checks. Investigate incidents, track root-cause remediation, support SOC 2 evidence collection, and collaborate closely with software engineers on secure development and incident response.

Conduct threat hunting across exploitation and attacker infrastructure data, investigate payloads and malware, develop detections and automation, and produce actionable threat intelligence. The role involves analyzing PCAPs, network traffic, vulnerabilities, and large datasets; writing Suricata/Snort rules and Nuclei templates; publishing research; presenting findings; and establishing VulnCheck’s threat hunting methodology and capabilities.

Designs, builds, and operates secure, scalable cloud infrastructure, deployment pipelines, and operational systems. Owns infrastructure architecture, provisioning, CI/CD, infrastructure-as-code, automation, observability, reliability, cost optimization, and incident response. Leads SRE practices, resolves complex production issues, supports distributed systems and microservices, and collaborates with Product and Engineering teams. Participates in on-call rotations and drives durable solutions that improve platform availability and performance.