Ten or more years in security engineering at scale, with a track record at companies known for security maturity (e.g., Google, Stripe, Cloudflare, Anthropic, Microsoft, Apple, Snowflake, Databricks, Palantir, or comparable). You have been a founding or near-founding security hire at a fast-growing company; you have built threat models, incident response runbooks, and a small high-leverage team without becoming a process department.