• Lead and evolve the company’s application security strategy, roadmap, and day-to-day operations. • Serve as the primary AppSec partner for numerous dev teams working on Ruby on Rails web apps, React Native mobile apps, and various other projects including Python and Go. • Provide security guidance during design, development, and code review for new features and projects. • Drive adoption of secure coding practices and threat-modeling across engineering teams. • Manage and optimize existing AppSec tooling. • Improve automation and integration of security tools into CI/CD pipelines. • Build and maintain secure development standards, playbooks, and training materials. • Work with DevOps to ensure secure AWS infrastructure deployments and configurations. • Lead or support investigation and remediation of application-level vulnerabilities. • Monitor, prioritize, and track findings from SAST/DAST/ASM tools.