This role combines technical leadership and hands-on execution: you will spend ~60% of your time performing application security testing, vulnerability assessments and penetration testing, code reviews, AI/ML security testing, and automation, and ~40% of your time managing the AppSec domain, leading the team, defining strategy, and coordinating with stakeholders. Experience managing AppSec tooling stack like Checkmarx, Burp Suite Enterprise, OWASP ZAP, MobSF, and open-source frameworks; exposure to AI security testing tooling (e.g., Garak, PyRIT, or equivalent) is a plus.