Perform application security assessments (code review, pentesting), integrate SAST/DAST/SCA into CI/CD, lead threat modeling, secure AI/ML code and model endpoints, manage cloud/container security (AWS/GCP), automate IaC security checks, mature bug bounty, and participate in incident response and on-call rotation.