• Lead application security assessments, including scoping and managing penetration testing, threat modeling, and secure design reviews for high-impact systems. • Identify, validate, and prioritize complex security vulnerabilities across web applications, APIs, and cloud-native services. • Partner with software engineers to embed secure-by-default patterns into application architectures and development workflows. • Influence the security of primarily AWS-based systems, with exposure to GCP and Azure, focusing on identity, networking, data protection, and service integrations. • Drive AI security initiatives by establishing guardrails, patterns, and review practices, and assess AI-specific risks such as data exposure, misuse, and unintended behaviors in AI- and LLM-powered systems. • Develop and promote scalable application and AI security standards, guardrails, and best practices. • Mentor and coach security engineers, raising the technical bar and fostering a culture of security across the team. • Serve as a technical owner for application and AI security tooling, responsible for configuration, integration, and ongoing improvement in partnership with engineering and platform teams.