Description

You will lead efforts to identify and mitigate security vulnerabilities across the client application portfolio.

Responsibilities

• Integrate security pipelines into the development process using Shift-left and Fail the Build methodologies.
• Implement and manage SAST, SCA, DAST, and Penetration Testing activities.
• Manage and prioritize vulnerabilities, coordinating remediation efforts with IT departments based on risk levels.
• Provide advisory services to projects, driving the Security by Design culture.
• Assess security risks within projects, identifying weaknesses in the technology stack and recommending remediation strategies.

Required Skills

• 10+ years of experience in a security domain, preferably Application Security/Risk Management.
• Extensive knowledge of the OWASP Top 10 and web application exploitation countermeasures.
• Proficiency in scripting/coding using Java, Python, Javascript, R, Apex, Go, or similar languages.
• Experience with CICD pipelines, DevOps, and DevSecOps practices.
• Expertise in performing and coordinating security tests, including vulnerability scans and web application penetration tests.
• Proficient in reviewing architecture and solution design documentation to assess potential risks.
• Experience implementing ISO 27001, NIST, or PCI-DSS controls, alongside App Sec assessments.
• Strong ability to lead complex projects and communicate security rationale to both technical and business teams.

Key Skills

Education

Any Graduate