Lead application security by embedding AppSec into the SDLC, owning tooling and automation (SAST/DAST/SCA), partnering with developers and platform teams, triaging findings, securing AWS and Kubernetes, scanning containers and IaC, and automating compliance evidence for SOC 2/ISO 27001.

Lead a pod owning Canary's Physical Access product (Mobile Key), design and evolve architecture for lock-vendor integrations and encoder/BLE paths, improve reliability and latency, partner with Product, mentor and manage engineers, run pod processes, and hire for the team.