• Partner closely with engineering and product teams to embed secure development practices across the entire software development lifecycle (SDLC). • Be the subject matter expert on application security, guiding the business in building secure, scalable and HIPAA-compliant software solutions. • Collaborate with product and IT engineering teams to design secure applications and features. • Educate developers on secure coding practices and security testing. • Conduct code reviews, threat models and risk assessments to identify and mitigate vulnerabilities early. • Perform internal penetration testing and support incident response for application-level issues. • Continuously monitor the threat landscape to proactively adjust defenses and strategies. • Develop and implement tools and frameworks to integrate security into CI/CD pipelines. • Work with teams to build and enforce secure SDLC controls in a fast-paced agile environment. • Own and enhance application vulnerability management and remediation processes. • Lead implementation of security policies, standards and remediation processes. • Work cross-functionally to balance security risks with business objectives and product timelines. • Participate in security incident response, forensic investigations and security incident postmortems related to applications and systems.