Responsibilities
- Work closely with product and engineering teams to incorporate security practices into product design and system architecture.
- Perform threat modeling and evaluate risks to uncover weaknesses and potential attack paths throughout the entire product ecosystem.
- Oversee the secure software development lifecycle, focusing on secure coding and third-party library supply chain integrity.
- Monitor evolving security standards and frameworks, such as OWASP Top 10 for LLMs and MCP security guidelines, and adapt them into enforceable internal policies.
- Analyze and prioritize findings from bug bounty programs and externally reported security issues.
- Participate in on-call duties to support timely response to security incidents.
