Designing and implementing security controls, conducting security architecture reviews, building detection and response tooling, managing vulnerability programmes, conducting security code reviews, implementing cloud security guardrails, and responding to security incidents.