Build and operate application and cloud security automation, including vulnerability triage pipelines, AI-assisted security review, Google Cloud hardening, CI/CD scanning, and software supply chain controls. Review authorization, identity, and tenancy designs; coordinate remediation across engineering teams; handle security findings, incidents, access questions, and assessments; and create runbooks that standardize security processes.