Description

You will lead and manage application security testing activities across web, API, and mobile platforms.

Responsibilities

• Lead and manage a team of application security testers to execute comprehensive security testing across web, API, and mobile.
• Plan and prioritize testing activities to ensure timely delivery of security assessments and actionable remediation plans.
• Conduct hands-on application security testing using SAST, DAST, and SCA.
• Produce documentation including test strategy, test plan, and testing reports prioritized by risk and impact.
• Collaborate with Development, QA, and DevOps teams to embed security throughout the SDLC.

Required Skills

• 8-15 years of experience in Application Security Testing, with 2-3 years in a leadership role.
• Proven experience in manual security testing techniques beyond tool-based scanning.
• Strong hands-on expertise with SAST, DAST, and SCA tools and frameworks.
• Experience testing Web, RESTful APIs, and Mobile applications.
• Deep understanding of OWASP Top 10, CWE, and secure coding practices.
• Familiarity with DevSecOps principles and integrating security testing into CI/CD pipelines.
• Demonstrable knowledge of common attacks and remediation for web, mobile, and API systems.
• Experience managing test cases, defect lifecycles, and risk scoring (e.g., CVSS).

Preferred Skills

• Familiarity with authentication standards (OAuth 2.0, Open ID Connect, SAML).
• Relevant certifications such as OSCP, CEH, or GWAPT.

Key Skills

Education

Any Graduate