Experience reviewing or analyzing findings from vulnerability-scanning, configuration-compliance, web application security, static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), or similar tools. Experience integrating security tools into CI/CD pipelines, including SAST, DAST, SCA, infrastructure-as-code scanning, container scanning, secrets detection, or dependency management.