Description

You will lead vulnerability identification and mitigation across the client application portfolio.

This role is hybrid.

Responsibilities

• Integrate security pipelines into development using Shift-left and Fail the Build methodologies.
• Implement and manage SAST, SCA, DAST, and penetration testing activities.
• Manage and prioritize vulnerabilities, coordinating remediation with IT departments based on risk levels.
• Provide advisory services to drive a Security by Design culture and assess risks in project architecture.
• Identify technology stack weaknesses and recommend remediation strategies.

Required Skills

• 10+ years of experience in security, preferably Application Security or Risk Management.
• Extensive knowledge of OWASP Top 10 and web application exploitation countermeasures.
• Proficiency in scripting or coding using Java, Python, JavaScript, R, Apex, Go, or similar languages.
• Experience with CI/CD pipelines, DevOps, and DevSecOps practices.
• Expertise in performing and coordinating security tests, including vulnerability scans and penetration tests.
• Proficient in reviewing architecture and solution design documentation to assess potential risks.
• Experience implementing ISO 27001, NIST, or PCI-DSS controls alongside App Sec assessments.
• Strong ability to lead complex projects and communicate security rationale to technical and business teams.

Key Skills

Education

Any Graduate