Knowledge of Zero Trust, SASE, ZTNA, secure web gateway, DNS security, cloud firewall, WAF, IDS/IPS, segmentation, and private access patterns for users, workloads, APIs, and internet-facing applications. Coordinates with Cloud Engineering and other internal teams to design and implement security controls, defenses, and countermeasures that protect company data, applications, and infrastructure across public cloud and internet-facing environments.