Description

You will lead product security, infrastructure, cloud, and GenAI security initiatives.

This role is on-site.

Responsibilities

• Drive product security strategy aligned with business and technology goals.
• Scale the AppSec program through threat modeling, secure code review, SAST, DAST, and dependency scanning.
• Integrate security tooling into CI/CD pipelines and build reusable security libraries.
• Oversee offensive security programs including red teaming, penetration testing, and bug bounty management.
• Mentor security engineers and influence architects during architectural reviews and incident response.

Required Skills

• 12 to 15 years of experience in Information Security with a focus on Product/AppSec.
• Minimum 5 years in a security leadership role.
• Expertise in Secure SDLC, DevSecOps, and Cloud & Platform Security.
• Deep technical knowledge of web, mobile (iOS/Android), API, and cloud-native security (AWS/GCP).
• Proficiency in secure coding practices using Java, Python, Node.js, or Go.
• Hands-on experience with CI/CD pipelines and security tools like Burp Suite, OWASP ZAP, SonarQube, Checkmarx, Snyk, or Veracode.
• Experience securing GenAI usage.
• Proven ability in stakeholder and program management.

Preferred Skills

• Security Management, Reporting, Risk Management, and Cost Management.

Key Skills

Education

Any Graduate