• Lead application security initiatives across all SaaS products and microservices. • Conduct threat modeling, architecture reviews, and secure code assessments for both backend and frontend systems. • Implement and manage security automation in CI/CD, integrating SAST, DAST, SCA, and container image scanning tools. • Collaborate with engineering teams to triage, prioritize, and remediate vulnerabilities across applications and containerized workloads. • Drive AppSec awareness and training, developing secure coding practices and guidelines. • Evaluate and deploy container security controls, ensuring images and orchestrators (Kubernetes, ECS, etc.) follow best practices. • Support bug bounty and vulnerability disclosure programs and coordinate penetration testing. • Stay ahead of emerging application and container threats, and recommend preventive controls aligned with OWASP and CIS benchmarks.