General Manager -Application Security

Role & Responsibilities

• Conduct regular security assessments (SAST/SCA/DAST) utilizing both automated and manual methods to identify security vulnerabilities
• Responsible for assessing the risk of the found vulnerabilities as per Company Security Standards and documenting them with proper proof of concepts, as necessary
• Perform security design and architectural reviews for new and existing applications to ensure they meet security standards and best practices.
• Collaborate with technical teams and business stakeholders to provide expert advice on vulnerability remediation strategies and best practices.
• Assess risks reported in the vulnerability assessment results and other security related data, and prioritize remediation actions Integrate security practices into the CI/CD pipeline to identify and address vulnerabilities early in the development cycle and maintain the tooling in the CICD pipeline
• Identify and implement automation opportunities within security testing and review processes to enhance efficiency and effectiveness.
• Awareness of working and adapting to Agile environment
• Have knowledge of standards like ISO 27001, PCI & DPDPA

Qualifications & Skills :

• A bachelors or higher degree in Computer Science, Computer Engineering, or similar discipline.
• Minimum 10+ years of hands-on experience in application security and 6 years in DevSecOps, and extensive knowledge in any one of the object-oriented programming languages.
• Strong Information Security technical skills and knowledge to identify, research and understand security control gaps and program compliance issues.
• Strong web application security experience with thorough understanding of web application vulnerabilities and secure coding practices
• Demonstrated experience in performing threat modelling, security architecture review, and vulnerability assessment on applications and infrastructure

Pay: ₹2,000,000.00 - ₹2,300,000.00 per year

Application Question(s):

• How many years of hands-on experience do you have in Application Security?
• How many years of experience do you have in DevSecOps?
• Current CTC?
• Notice Period?

Work Location: In person