- Implement and operate security technologies (SAST, DAST, SCA, API, container, and cloud security posture management). - Support the implementation and optimization of security engineering processes and tools. - Collaborate with Development and DevOps teams to integrate security into the software development lifecycle (SDLC) and CI/CD pipelines. - Manage the application vulnerability lifecycle. Oversee the entire process of handling application vulnerabilities from receiving vulnerability reports to tracking resolution. - Assist with conducting penetration testing and vulnerability assessments; assist in identifying and remediating security issues. - Act as the main point of contact for external service providers related to vulnerability management and penetration testing, ensuring smooth communication and collaboration. - Coordinate with stakeholders to develop and implement action plans and maintain milestone tracking until completion. - Participate in threat modeling and risk assessments for business systems. - Assist with incident response activities and root cause analysis for security events. - Work closely with senior engineers, product managers, and other stakeholders to ensure security best practices are followed. - Communicate findings and recommendations effectively to technical and non-technical audiences. - Contribute to security documentation, standards, and training initiatives. - Stay current with the latest security trends, threats, and technologies. - Participate in ongoing learning and professional development in product security and cloud-native security.