Own DISCO’s end-to-end security program across application security, AWS infrastructure, identity and access, detection and incident response, compliance, and risk. Lead threat modeling, secure architecture reviews, vulnerability remediation, penetration testing, security baselines, monitoring, incident investigations, SOC 2 activities, and security roadmap development. The role partners with engineering, product, legal, and leadership while mentoring staff and strengthening security culture in a remote SaaS environment.