• Conduct security assessments using SAST, DAST, and SCA tools to identify vulnerabilities in applications • Perform code reviews and provide secure coding guidance to development teams • Implement and maintain GitHub Advanced Security, including secret scanning and code scanning • Assess and improve security of Infrastructure as Code (IaC) deployments using Terraform • Evaluate container security in our Docker and Kubernetes environments • Support CI/CD security integration and automation • Conduct penetration testing and red team/purple team exercises on applications • Review and secure API implementations, with focus on GraphQL security • Evaluate AI/ML model security and implement protections against prompt injection and other AI-specific threats • Collaborate with the Staff AppSec Engineer on CIAM and advanced AI security initiatives • Maintain security documentation and contribute to security awareness training