Own and build scalable corporate security controls across identity, endpoints, SaaS, and workforce infrastructure. Automate detection and remediation (Python, Terraform), run macOS-first endpoint programs (MDM, EDR), secure AI tool usage, reduce SaaS risk with SSPM, support audits (SOC 2, ISO 27001), and partner on incident response and telemetry with Detection & Response.

Design, implement, and operate high-signal detections across cloud, identity, endpoints, and SaaS. Build and improve detection platforms, automation, and LLM-enabled workflows. Translate threat intelligence into telemetry and detections, participate in incident response and on-call rotation, and track metrics like MTTD and alert quality to guide investments.