Partner with application teams to identify, prioritize, and remediate security findings from automated and manual testing, penetration tests, and bug bounty programs. Provide secure development guidance, manage application security testing tools such as CodeQL and Rapid7, coordinate penetration testing, track defects, and improve security maturity through scorecards and corrective-action learning.