Monitor and analyze security events, lead incident response and employee investigations, conduct digital forensics, and communicate findings to technical, executive, legal, and compliance stakeholders. Build investigation scripts, runbooks, automated workflows, and security operations capabilities. Mentor engineers and support insider threat initiatives while collaborating across teams on cloud security and incident response.

Own end-to-end third-party security risk assessments, vendor tiering, reassessments, remediation tracking, and contract security reviews. Partner with Legal, Procurement, and business owners; support ISO, SOC, and FedRAMP audits; escalate unresolved risks; and maintain dashboards reporting third-party risk posture. The role also supports automation and AI-enabled vendor risk workflows and mentors junior team members.