Application Security roles focus on identifying and reducing security risks in software and applications. Professionals in this area may work with secure development practices, vulnerability testing, code security, application testing, threat modeling, and DevSecOps processes.