• Design, implement, and manage application and cloud security tooling across AWS, including Security Hub, GuardDuty, Macie, Inspector, and related automation. • Lead the deployment and configuration of Wiz CSPM, collaborating with infrastructure and DevOps teams to enhance visibility and remediation workflows • Manage secure code scanning processes, integrating SAST (Static Analysis) and DAST (Dynamic Analysis) using Sonar Cloud to identify and remediate vulnerabilities early in the SDLC. • Develop automated pipelines and playbooks for vulnerability triage, remediation tracking, and reporting of metrics. (MTTD, MTTR) • Partner with software engineering teams to embed security into CI/CD pipelines and promote secure coding practices. • Collaborate with the Security, IT, and GRC teams to ensure alignment with SOC 2, HIPAA, and SOX controls. • Contribute to threat modeling, code review, and incident response related to application vulnerabilities. • Evaluate and implement new security tools and processes to enhance the overall application security posture. • Support vendor risk assessments and penetration testing efforts related to application components. • Create and maintain security documentation, architecture diagrams, and operational runbooks. • Participate in on-call rotations as part of the broader security operations program. • Other duties as assigned.