Desired Skills & Experience Deep knowledge of secure application architecture, STRIDE or similar threat modeling methodologies, OWASP risks, API security, authentication, authorization, cryptography, and data protection. This hybrid role requires three days onsite and combines hands-on application security, threat modeling, AI/LLM-enabled automation, and security engineering at enterprise scale.