• Manage and optimize application security tools (SAST, DAST, SCA, IaC, secret scanning) and ensure effective integration into CI/CD pipelines and the SDLC lifecycle. • Analyze source code and infrastructure-as-code for security vulnerabilities and provide actionable remediation guidance. • Validate and triage findings from security tools, removing false positives and ensuring accurate issue tracking. • Create and manage remediation tickets (e.g., Aha! Ideas, ServiceNow Requests), ensuring vulnerabilities are prioritized, assigned, and tracked to resolution. • Collaborate with development and engineering teams to validate remediation efforts and confirm closure of security issues. • Participate in the risk management process by documenting, reviewing, and maintaining risk exceptions for unresolved or accepted vulnerabilities. • Work with risk owners and business stakeholders to ensure appropriate compensating controls are in place and documented. • Lead secure code reviews and contribute to threat modeling and design discussions for high-risk applications. • Mentor junior engineers and provide technical guidance on secure development practices. • Contribute to the development and refinement of secure coding standards, policies, and procedures. • Develop and maintain dashboards and reports that communicate application security posture, remediation progress, and risk trends to leadership. • Identify recurring security issues and propose systemic improvements to reduce future risk. • Lead efforts to evaluate, pilot, and implement new application security tools and integrations that enhance automation and coverage. • Continuously refine scanning configurations and policies to improve the signal-to-noise ratio in findings. • Stay informed on emerging threats, vulnerabilities, and industry trends, and recommend improvements to tooling and processes. • Participate in the evaluation and onboarding of new security tools and technologies. • Work closely with cross-functional stakeholders to analyze and troubleshoot complex production issues.