Perform project-specific security risk analysis covering threat scenarios, exploitability, exposure, data sensitivity, business and regulatory impact, existing controls, and release dependencies. Working familiarity with Jira, Salesforce-based applications, Tenable Cloud, Veracode static and dynamic testing, GitHub, and GitHub Copilot or comparable approved tools .