Lead cloud security strategy and hands-on execution across AWS environments. Own CNAPP and CSPM capabilities, improve IAM and container security, build infrastructure-as-code guardrails, conduct architecture reviews and threat modeling, support detection and incident response, and drive remediation programs. Establish a multi-year cloud security roadmap, influence engineering priorities, mentor teammates, and partner with platform, infrastructure, SOC, and product engineering teams.