8+ years of experience in application security, software development, or a related engineering role. - Strong understanding of secure software development practices, including experience working with developers to embed security into the SDLC. - Hands-on experience conducting security design reviews, threat modeling, and code reviews for web and cloud-based applications. - Familiarity with common application vulnerabilities (e.g., OWASP Top 10) and experience in identifying and remediating them. - Experience working with security tools such as SAST, DAST, SCA, and container security scanners. - Ability to communicate security concepts effectively to both technical and non-technical stakeholders.