The security org here reports to the CISO and runs as a real security engineering team, separate from DevOps and infrastructure. This seat is the top cloud security IC on that team. You will define secure-by-default architecture for AWS and GCP, own threat modeling as a repeatable practice, and build the controls yourself in Terraform and Python rather than managing security through vendor consoles. It is a builder role for a true security engineer, not a DevSecOps or platform seat. On-call rotation, mostly remote, NYC office about once a month. Visa sponsorship and transfers are available.