Application Security Lead

Must have 9-10 years of hands-on experience in cybersecurity domain.

Proven experience in security architecture assessments and secure-by-design implementations.

Experience with enterprise security frameworks and methodologies.

Deep understanding of security architecture principles and frameworks

Proficiency in threat modeling methodologies (STRIDE, PASTA)

Deep, hands-on knowledge of the OWASP Top 10, OWASP ASVS, and OWASP SAMP/SAMM maturity practices.

Strong understanding of secure coding practices across common stacks (e.g., Java, .NET, Python, JavaScript/Node.js) and the ability to review code for security defects.

Expertise in API security, including OAuth 2.0, OpenID Connect, and secure token handling.

Familiarity with authentication/authorization protocols, secrets management, and cryptographic best practices at the application layer.

Experience with software supply-chain security, dependency/vulnerability management, and SBOM practices.

Knowledge of container and cloud-native application security (image scanning, runtime protection, secure configuration).

Knowledge of security controls and standards (NIST, ISO 27001, CIS Controls)