What you'll do: - Develop self-service security frameworks and paved roads that allow engineering teams to ship secure code by default. - Focus on automated guardrails for common vulnerabilities, while conducting deep-dive design reviews into complex business logic and data isolation issues (for example, multi-tenant isolation and authorization/permission bypasses) that automated tools cannot catch. - Partner with product and engineering teams to review designs early, contribute to threat modeling for new features and complex initiatives, and provide clear, actionable security guidance. - Research emerging threats and evolving best practices, specifically regarding AI and LLM safety, and implement controls to secure these workflows. - Manage and evolve our approach to external penetration testing and bug bounties, driving remediation for findings and treating vulnerability management as an engineering problem. - Contribute to the long-term roadmaps, metrics, and strategic planning for the security team. -

What you'll do: - Develop self-service security frameworks and paved roads that allow engineering teams to ship secure code by default. - Focus on automated guardrails for common vulnerabilities, while conducting deep-dive design reviews into complex business logic and data isolation issues (for example, multi-tenant isolation and authorization/permission bypasses) that automated tools cannot catch. - Partner with product and engineering teams to review designs early, contribute to threat modeling for new features and complex initiatives, and provide clear, actionable security guidance. - Research emerging threats and evolving best practices, specifically regarding AI and LLM safety, and implement controls to secure these workflows. - Manage and evolve our approach to external penetration testing and bug bounties, driving remediation for findings and treating vulnerability management as an engineering problem. - Contribute to the long-term roadmaps, metrics, and strategic planning for the security team. -