• conduct security assessments using both Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) methodologies • collaborate with software development teams to integrate security into the development life cycle • conduct security assessments of web, mobile, and other applications • analyze security assessment results to identify vulnerabilities and provide guidance on remediation • design and implement secure software development practices, including threat modeling and secure coding standards • stay current with security threats, trends, and technologies • conduct application security investigations and provide recommendations to mitigate risk • maintain security documentation