Capability Lead – Application Security

Job Summary

Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion its a place where you can grow, belong and thrive.

Key Responsibilities Practice Development

• Develop and execute strategic plans for the application security practice
• Develop/enhance service capabilities in the areas of application security including application security assessments, threat modelling, vulnerability scanning, penetration testing, and code reviews to identify and mitigate potential security issues.
• Develop service offerings, pricing strategies, and sales collateral
• Oversee security assessments programs (DAST/SAST/SCA) and application security audits
• Collaborate with sales teams, pre-sales teams and other internal and external stakeholders to proactively position application security services to customers.
• Establish solution/service center of excellence (CoE) through collaboration with vendors and partners including startups
• Stay updated on the latest security threats, trends, and technologies to provide advisory to customers.

Delivery and Operations

• Govern application security delivery
• Manage application security CoEs to
• Stay up-to-date with emerging threats, technologies, and application exploit techniques

Go-to-Market

• Collaborate with sales teams to develop and execute go-to-market strategies
• Develop and deliver thought leadership content (e.g., blog posts, white papers, webinars, conference talks)
• Build relationships with key clients, partners, and industry influencers

Leadership

• Lead and mentor a team of security professionals, including managers and individual contributors
• Foster a culture of innovation, collaboration, and continuous learning

Qualifications Experience

• 15+ years of experience in application security, with 8+ years in leadership roles
• Proven track record of building and managing successful security practices
• Strong knowledge of penetration testing, red teaming, purple teaming, breach attack simulation, and ethical hacking
• Experience with practice development, go-to-market strategies, and sales enablement
• Excellent leadership, communication, and interpersonal skills
• Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, CISA, CISM)

Workplace type: Hybrid Working