Head Application Security

3 weeks ago


Noida, India Paytm Full time
About Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small businesses with payments and commerce. Paytm’s mission is to serve half a billion Indians and bring them to the mainstream economy with the help of technology.Key Responsibilities: Lead and mentor a team of 20+ Application Security Engineers, fostering a culture of technical excellence, ownership, and continuous improvement in secure software development.Define and drive the enterprise application security strategy, embedding security into all stages of the SDLC and aligning with business objectives.Oversee comprehensive application vulnerability management, including identification, triage, prioritization, and remediation tracking of vulnerabilities across cloud-native, on-prem, and third-party applications.Manage and optimize security testing programs (SAST, DAST, SCA, IAST, penetration testing, threat modeling, and code reviews) to ensure risks are detected early and addressed effectively.Collaborate with Engineering, DevOps, and Cloud teams to integrate AppSec controls into CI/CD pipelines and enforce security guardrails for AWS-hosted applications and microservices.Provide AWS application security expertise, including IAM best practices, secrets management, container security (EKS/ECS), API security, and securing serverless workloads.Lead technical response to application-layer incidents, ensuring timely detection, root cause analysis, containment, and remediation, while improving incident playbooks.Establish and enforce application security standards, policies, and secure coding practices aligned with OWASP, NIST, PCI-DSS, and cloud security benchmarks.Drive secure coding training and awareness programs for developers and architects, elevating security maturity across product engineering teams.Stay ahead of evolving application threats, cloud security risks, and DevSecOps practices to continuously strengthen the organization’s AppSec posture.Provide executive-level reporting and metrics on application risk, vulnerability trends, remediation progress, and overall security maturity to senior leadership and stakeholders.Required Qualifications: Bachelor's degree in Computer Science, Information Security, or related field (Master’s preferred).15+ years of experience in application security, with at least 5 years in a leadership or managerial role.Proven track record of successfully managing and scaling security engineering teams of 20+ engineers.Deep expertise in secure coding practices, vulnerability assessments, penetration testing, and threat modeling.Extensive hands-on experience with modern application security tools (, SAST, DAST, SCA, IAST).Strong knowledge of web application technologies, cloud platforms (AWS, Azure, GCP), and secure development practices.Thorough understanding of compliance requirements (, GDPR, HIPAA, SOC 2) and the ability to integrate security measures within legal and regulatory frameworks.In-depth experience with secure SDLC, CI/CD pipeline integration, and DevSecOps practices.Excellent communication skills with the ability to articulate complex security concepts to both technical and non-technical stakeholders.Strong leadership and team-building skills, with a focus on fostering a culture of security excellence.Desired Skills: Certifications in application security (, CISSP, OSCP, GWAPT) are highly preferred.Experience with vulnerability management, threat intelligence, and risk management frameworks.Familiarity with container security, microservices, and serverless architecture.Proven ability to influence cross-functional teams to prioritize security in development processes. Compensation  If you are the right fit, we believe in creating wealth for you. With enviable 500 mn+ registered users, 21 mn+ merchants and depth of data in our ecosystem, we are in a unique position to democratize credit for deserving consumers & merchants – and we are committed to it. India’s largest digital lending story is brewing here. It’s your opportunity to be a part of the story

  • Greater Noida, Uttar Pradesh, India Paytm Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Job Description : Head Application Security Location: Noida, Uttar PradeshTechnology: Monitoring & SecurityEmployment Type: On-rollWork Environment: On-siteAbout Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small...


  • Noida, India Paytm Full time

    About Us: Paytm is India's leading mobile payments and financial services distribution company. Pioneer of the mobile QR payments revolution in India, Paytm builds technologies that help small businesses with payments and commerce. Paytm’s mission is to serve half a billion Indians and bring them to the mainstream economy with the help of technology.Key...


  • Noida, Uttar Pradesh, India Coredge Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Application Security Specialist (6–8 Years Experience)Job Title: Application Security SpecialistExperience Required: 6–8 YearsLocation: NoidaJob Type: Full-TimeDepartment: Cyber SecurityReporting to: Head/CISO Cyber Security.Role Overview:As an Application Security Specialist at , you will be responsible for embedding security into the development...


  • Noida, India Clearwater Analytics Full time

    Responsible for working with Clearwater Analytics development teams to ensure security is injected into the software development lifecycle and products are secure. This role will focus on implementing, enforcing and validating secure coding practices and engaging directly in application security reviews, threat modeling and ownership over application...


  • Noida, India Clearwater Analytics Full time

    Responsible for working with Clearwater Analytics development teams to ensure security is injected into the software development lifecycle and products are secure. This role will focus on implementing, enforcing and validating secure coding practices and engaging directly in application security reviews, threat modeling and ownership over application...


  • Noida, Uttar Pradesh, India Clearwater Analytics Full time ₹ 12,00,000 - ₹ 36,00,000 per year

    Responsible for working with Clearwater Analytics development teams to ensure security is injected into the software development lifecycle and products are secure. This role will focus on implementing, enforcing and validating secure coding practices and engaging directly in application security reviews, threat modeling and ownership over application...


  • Bengaluru, Chennai, Noida, India Athena Full time ₹ 8,33,333 - ₹ 25,00,000 per year

    Support asset development, process establishment.Conducting application security assessments (web, mobile, web service, Infra etc.). These assessments involve manual testing and analysis as well as the use of automated application vulnerability scanning/testing tools such as Burp Suite Professional and/or code review tools such as HCL AppScan/HP Fortify or...


  • Noida, India GlobalLogic Full time

    Job: - IRC166875- Location: - India - Noida- Designation: - Senior Consultant- Experience: - 10-15 years- Function: - Engineering- Skills: - Application Security, Penetration Testing and Reporting, Pentesting, Secure Coding and Code Analysis, Secure development life cycle, Security, Threat modelling**Description**: Passionate about Secure By Design/Zero...


  • Noida, Uttar Pradesh, India Paytm Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    We are seeking an experienced Application Security Manager to lead our security initiatives andensure the integrity, confidentiality, and availability of our systems and data. This role is crucialin safe guarding our digital assets and maintaining compliance with industryTo Integrate securitytools, standards, and processes into theproduct life...


  • Noida, Uttar Pradesh, India Princeton IT America Full time ₹ 4,80,000 - ₹ 15,00,000 per year

    Job Tittle: ServiceNow Application Security EngineerLocation: Noidaexperience: 3 to 6 yearsLooking for Immediate JoinersKey ResponsibilitiesImplement and enforce security best practices across the ServiceNow environment.Manage role-based access controls (RBAC), ACLs, and data policies to safeguard sensitive data.Conduct code reviews, vulnerability...