Description

Lead application security testing for web, API, and mobile platforms, managing the team and execution lifecycle.

This role is on-site.

Responsibilities

• Lead and manage a team of application security testers to execute security assessments.
• Conduct hands-on testing using SAST, DAST, and SCA tools across web, API, and mobile environments.
• Produce test strategies, plans, and risk-prioritized reports with actionable remediation guidance.
• Collaborate with Development, QA, and DevOps to embed security testing into CI/CD pipelines.

Required Skills

• 8-15 years of experience in Application Security Testing.
• 2-3 years of experience in a leadership or management role.
• Strong hands-on expertise with SAST, DAST, and SCA tools and frameworks.
• Proven experience in manual security testing techniques beyond automated scanning.
• Deep understanding of OWASP Top 10, CWE, and secure coding practices.
• Experience testing Web, RESTful APIs, and Mobile applications.
• Familiarity with DevSecOps principles and integrating security into CI/CD pipelines.
• Experience managing test cases, defect lifecycles, and risk scoring (e.g., CVSS).

Preferred Skills

• Familiarity with authentication standards (OAuth 2.0, Open ID Connect, SAML).
• Relevant certifications such as OSCP, CEH, or GWAPT.

Key Skills

Education

Any Graduate