Technical Skills:

• Build and maintain security automation and tooling to detect vulnerabilities through static and dynamic analysis across code and live systems.
• Conduct application security assessments, penetration tests, and code reviews to identify high-risk security issues and provide secure development guidance.
• Develop and operate vulnerability management workflows, partnering with engineering teams to prioritize and remediate findings.
• Establish and test security guardrails for code, cloud resources, and infrastructure components throughout the Anchorage platform.

Complexity and Impact of Work:

• Monitor and respond to security events and configuration anomalies across the organization, leading investigation and containment efforts.
• Manage the full vulnerability lifecycle from discovery through remediation, tracking progress and ensuring timely closure of findings.
• Lead or substantially contribute to Security initiatives with minimal oversight, coordinating across team boundaries to drive projects to completion.
• Break complex security problems into manageable workstreams with accurate scope and time estimates. Present options clearly and provide well-reasoned priority recommendations.
• Deliver assurance artifacts and evidence for regulated entity requirements, supporting audit and compliance efforts.
• Balance speed of response with thoroughness of investigation, adapting approach based on risk and business impact.

Organizational Knowledge:

• Understand and help implement the company's security strategy by participating in planning and defining Security goals in alignment with Anchorage Digital's overall objectives.
• Stay alert to emerging threats, vulnerabilities, and industry trends that could affect organizational security posture.
• Consider security holistically across the product ecosystem—applications, infrastructure, and third-party integrations—while fostering a security-first culture.
• Collaborate cross-functionally with Engineering, Infrastructure, and Compliance teams to embed security into development and operational processes.

Communication and Influence

• Share knowledge broadly across the team through documentation, runbooks, and post-incident reviews, preventing single points of failure.