Hands-on experience with:Manual application security testing (web/API)SAST, SCA, DAST toolsCommon vulnerabilities (OWASP Top 10, API risks)Experience with at least one cloud platform (Google Cloud, Microsoft Azure, or AWS).Strong programming/scripting experience (Python, Java, JavaScript, Bash, PowerShell, or similar).Proficiency working in command-line environments (Linux/Unix).Familiarity with CI/CD pipelines and DevSecOps practices. The ideal candidate is hands-on, execution-focused, and comfortable leveraging modern tooling-including AI-powered development and security assistants-to improve productivity, testing depth, and vulnerability detection.