Description

You own the product security posture, embedding controls into the SDLC and ensuring vulnerabilities are remediated within SLAs.

This role is hybrid.

Responsibilities

• Conduct application security reviews, threat modeling, and attack surface analysis to identify and validate vulnerabilities and attack chains.
• Embed security gates into the existing SDLC, leveraging automation for requirements gathering, secure coding, and third-party component management.
• Develop and maintain penetration testing methodologies, security architecture patterns, and standards for application security compliance.
• Communicate findings, attack paths, and remediation recommendations to technical and executive stakeholders through reports and presentations.
• Act as the control owner for s-SDLC controls, ensuring security requirements are defined before coding and vulnerabilities are fixed on time.

Required Skills

• 10+ years of experience in application security, product security, or related security domains.
• Strong foundation in core information security principles, including encryption, authentication, and secure design patterns.
• Proficiency in .NET, Java, Go, Python, JavaScript, PowerShell, and Bash.
• Proven ability to manage projects and processes independently with limited supervision.
• Experience in secure software development life cycle (s-SDLC) integration and defect management.
• Ability to identify application vulnerabilities and advise on appropriate remediation strategies.
• Effective communication skills, with the ability to explain sophisticated security topics to technical and non-technical stakeholders.

Preferred Skills

• Recognized subject matter expert in applicable work areas.
• Ability to situationally adapt and understand new technology or processes as per business requirements.

Key Skills

Education

Any Gradute