Conducts red-team penetration testing of web, mobile, API, cloud, AI, and LLM applications, assessing vulnerabilities like prompt injection, jailbreaking, and data poisoning. Develops autonomous AI security-testing agents and maintains application-security tools such as SAST, DAST, and WAF.