• Partner with engineering, platform, and product teams to embed security into day-to-day delivery and SDLC workflows • Support application security programs across SAST, DAST (web and API), SCA, and secrets scanning • Strengthen software supply chain security and integrate security controls into the Harness unified pipeline and related CI/CD workflows • Build AI-powered workflows including agentic IDE and MCP server integrations to automate triage, prioritize and enable auto remediation via standardized playbooks • Reduce false positives and operational noise by using AI-assisted analysis to tune and maintain SAST queries/rules • Support response to zero-day events by accelerating assessment/scanning and automating identification of affected assets (e.g., vulnerable libraries or malicious packages) using inventory sources • Create and maintain runbooks, playbooks, and documentation for recurring findings, remediation steps, and operational processes • Support the security exemption/exception process, including documentation, approvals, and expiry/renewal tracking