What do AppSec Engineers at large companies do exactly?

I'm an AppSec Engineer at a startup (around 300 employees). I do everything from running DAST/SAST scans on our web apps and APIs, remediating findings from those scans, threat modeling new features, performing automated and manual security tests on new features, code reviews, working with dev teams to fix vulnerabilities, writing scripts to automate various workflows, and leading the security champions program. I'm a jack of all trades but don't really have deep expertise any one particular area. Maybe anything …

apis apps appsec automated code companies cybersecurity dast dev dev teams employees engineer engineers features findings fix large modeling new features performing reviews sast scans security startup teams tests threat threat modeling vulnerabilities web web apps working writing