Own &implement DevSecOps strategy on AWS, build secure CI/CD pipelines with SAST, SCA, DAST, and container security, enforce policy-as-code aligned with OWASP/NIST/CIS, design reusable IaC standards, Drive automation, metrics, continuous improvement.