5+ years of experience in application or product security. Expertise in secure architecture for thick clients, local storage protection, inter-process communication, and web security standards. Hands-on experience with mobile (iOS/Android) and desktop (Windows/macOS/Linux) security models. Proficiency in GenAI security, modern cryptography, certificate management, secure authentication, and secure session handling. Knowledge of OS hardening techniques, sandboxing, privilege separation, and secure use of platform APIs. Familiarity with static/dynamic analysis tools, fuzzing, penetration testing, and reverse engineering. Strong cross-team communication and ability to write clear security guidelines for developers. Experience embedding security into the software development lifecycle.