• Responsible for designing, implementing, and maintaining application security practices across the organization • Partner closely with engineering, DevOps, and the broader Information Security team • Embed security into the software development lifecycle (SDLC) • Ensure applications are resilient against evolving threats • Apply deep knowledge of application security architecture and design principles • Review application architectures to identify security risks and recommend appropriate controls and mitigation strategies • Design and implement secure coding standards, guidelines, and patterns aligned with industry best practices • Lead and support the implementation of a secure SDLC • Ensure security requirements are consistently applied across cloud, web, mobile, and API-based applications • Perform and facilitate threat modeling exercises with development teams • Conduct risk assessments and provide actionable guidance to reduce application-level security risk • Lead application security assessments, including static and dynamic analysis, architecture reviews, and manual testing • Perform and oversee code reviews to identify security vulnerabilities and design flaws • Serve as a trusted security advisor to development teams • Develop and deliver security training and awareness content for developers and technical stakeholders • Monitor relevant threat intelligence sources related to application and software supply chain risks