Lead cybersecurity engineering to embed supply chain integrity and DevSecOps across build, artifact, and deployment pipelines. Define end-to-end provenance, signing, attestation, and automated policy-as-code controls. Secure cloud-native platforms, container and IaC artifacts, and AI-assisted workflows. Partner with risk, infosec, and audit, report residual risk, and build and mentor a security engineering team and developer security champions.