Lead application security across the SDLC: integrate security into development and DevOps, manage vulnerabilities, implement AWS and cloud controls, perform threat modeling and incident response, enforce compliance (OWASP, NIST, ISO), and provide security training and continuous improvement.