Engineer-first security hire who builds the detection and response capability from the ground up. Owns detection pipelines, alerting, incident response automation, and the integration of the security stack (SIEM, EDR, cloud security, logging) across AWS. Leads incidents end to end, runs risk-based vulnerability management, reviews infra/CI/CD/IaC for gaps, and partners with the compliance lead on PCI DSS, HIPAA, and SOC 2 technical controls and audit evidence.