• Own end-to-end application security for all Self products • Conduct and manage vulnerability scanning, triage, and remediation tracking using security tools (e.g., SAST) • Partner closely with engineering and product teams to remediate critical security findings • Lead and perform third-party vendor security reviews and risk assessments • Support SOC 2 and PCI compliance efforts, including audit preparation and evidence collection • Identify application-level security risks and recommend mitigation strategies • Help embed secure-by-design practices into product development processes • Monitor emerging application security threats and recommend appropriate controls