Description

Lead the application security program and define security standards, policies, and best practices.

Responsibilities

• Perform security architecture assessments, threat modeling, and design reviews for applications.
• Conduct secure code reviews, penetration testing, and vulnerability scanning.
• Collaborate with development, DevOps, QA, and product teams to integrate security into the SDLC.
• Manage and prioritize vulnerability remediation and guide mitigation strategies.
• Drive security automation and tooling implementation across CI/CD pipelines.

Required Skills

• 12+ years of IT experience, with 7+ years focused on Application Security.
• Hands-on experience with security testing tools: SAST, DAST, IAST, SCA.
• Deep knowledge of OWASP Top 10, secure SDLC, and threat modeling.
• Experience securing applications in AWS, Azure, or GCP environments.
• Strong background in DevSecOps, CI/CD pipelines, and automation.
• Proficiency in Java, .NET, Python, or JavaScript for code review.
• Experience securing APIs and microservices.
• Familiarity with NIST, ISO, or FedRAMP compliance frameworks.

Key Skills

Education

Any Gradute