• Design, implement, and maintain secure application development practices across Java-based systems and microservices • Perform and manage SAST and DAST analysis within CI/CD pipelines, ensuring early detection and remediation of security flaws • Conduct security audits and penetration testing of web and mobile applications during development and pre-production phases • Continuously monitor and manage application vulnerabilities using automated scanning and manual validation methods • Collaborate with development teams to implement secure coding standards and improve overall application security posture • Track and assess the latest software versions, dependencies, and vulnerabilities, recommending timely upgrades and mitigation strategies • Implement and maintain best security practices for applications running in both cloud and on-prem environments • Participate in code reviews, threat modeling, and risk assessments as part of the secure SDLC process