Architects and builds automated application security capabilities across the SDLC for a large financial services program. Integrates and tunes SAST, DAST, and SCA tools within enterprise CI/CD pipelines, develops AI-enabled secure code scanning and hardened baselines, automates security runbooks, and reviews Java and Python code to provide detailed remediation guidance. The role also supports secure coding patterns, threat modeling, and AI-assisted vulnerability triage or code generation.