Description

You own the product security posture, embedding controls into the SDLC and ensuring vulnerabilities are remediated within SLAs. You serve as the security authority for assigned products, driving threat modeling, architecture reviews, and automated security gates.

Responsibilities

• Conduct application security reviews, threat modeling, and attack surface analysis to identify and validate vulnerabilities and attack chains.
• Embed security gates into the existing SDLC, leveraging automation for requirements gathering, secure coding, and third-party component management.
• Develop and maintain penetration testing methodologies, security architecture patterns, and standards for application security compliance.
• Communicate findings, attack paths, and remediation recommendations to technical and executive stakeholders through reports and presentations.
• Act as the control owner for s-SDLC controls, ensuring security requirements are defined before coding and vulnerabilities are fixed on time.

Required Skills

• 10+ years of experience in application security, product security, or related security domains.
• Strong foundation in core information security principles, including encryption, authentication, and secure design patterns.
• Solid understanding of common languages and frameworks: .NET, Java, Go, Python, JavaScript, PowerShell, and Bash.
• Proven ability to manage projects and processes independently with limited supervision.
• Experience in secure software development life cycle (s-SDLC) integration and defect management.
• Ability to identify application vulnerabilities and advise on appropriate remediation strategies.
• Effective communication skills, with the ability to explain sophisticated security topics to technical and non-technical stakeholders.

Preferred Skills

• Recognized subject matter expert in applicable work areas.
• Ability to situationally adapt and understand new technology or processes as per business requirements.

Key Skills

Education

Any Gradute