Own application security guardrails and tooling for a SaaS payment platform. Responsibilities include tuning SAST and SCA tools, integrating security checks into CI/CD pipelines, conducting manual web and API penetration tests, threat modeling, validating exploits, managing WAF and secrets security, triaging vulnerabilities, and reporting remediation metrics. The role partners closely with engineering, platform, and technology debt teams to reduce security risk while maintaining development velocity.