{
  "id": "role:appsec-engineer",
  "_kind": "Role",
  "_file": "role/roles/roles-expanded-2.yaml",
  "_cluster": "role",
  "attributes": {
    "displayName": "Application Security Engineer",
    "isAgentic": false,
    "requiredCapabilities": [],
    "requiredDomains": [],
    "description": "Secures application code and deployments — SAST/DAST tooling, secure\ncode reviews, threat modeling workshops, dependency vulnerability\nmanagement, and developer security training.\n"
  },
  "outgoingEdges": [
    {
      "from": "role:appsec-engineer",
      "to": "responsibility:security-review",
      "kind": "holds_responsibility"
    },
    {
      "from": "role:appsec-engineer",
      "to": "responsibility:dependency-security",
      "kind": "holds_responsibility"
    },
    {
      "from": "role:appsec-engineer",
      "to": "skill-area:application-security",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:appsec-engineer",
      "to": "skill-area:sast",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:appsec-engineer",
      "to": "skill-area:dast",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:appsec-engineer",
      "to": "skill-area:threat-modeling",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "role:appsec-engineer",
      "to": "domain:security",
      "kind": "applies_to",
      "attributes": {}
    },
    {
      "from": "role:appsec-engineer",
      "to": "domain:software-engineering",
      "kind": "applies_to",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "responsibility:dependency-security",
      "to": "role:appsec-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:supply-chain-integrity",
      "to": "role:appsec-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "workflow:dependency-upgrade-cycle",
      "to": "role:appsec-engineer",
      "kind": "involves_role",
      "attributes": {}
    },
    {
      "from": "workflow:cve-triage",
      "to": "role:appsec-engineer",
      "kind": "involves_role",
      "attributes": {}
    }
  ]
}