• Analyze application architectures to identify security risks and potential attack paths • Perform secure code reviews and vulnerability assessments, recommending effective remediation • Integrate security tools and automated checks into CI/CD and DevOps pipelines • Use static and dynamic scanning tools to identify, prioritize, and track security findings • Partner with developers and operations teams to embed security throughout the SDLC • Document and report application security issues, including remediation guidance and validation • Support new application and technology launches to prevent misconfigurations and data exposure • Collaborate with red teams, threat intelligence, and risk teams to reduce overall attack surface • Communicate security risks clearly to both technical and non-technical audiences • Support internal and external audits focused on compliance and risk reduction • Help define metrics and KPIs that demonstrate the effectiveness of the application security program • Participate in change management discussions and continuous improvement initiatives