Head of Application Security

4 weeks ago

india Agratas Full time

Job Title- Head of Application Security


Job Description:

We are seeking a highly skilled and motivated Application Security Leader and Vulnerability Management Specialist to join our team. This position plays a crucial role in ensuring the security and integrity of our organization's applications and infrastructure by leading the implementation of robust security measures and managing vulnerabilities effectively. The ideal candidate will possess a deep understanding of application security principles, vulnerability management processes, and the ability to collaborate with cross-functional teams to mitigate security risks.


Key Responsibilities:


1.Application Security :

  • Lead the development and implementation of comprehensive application security strategies, policies, and procedures.
  • Conduct security assessments and code reviews to identify vulnerabilities and weaknesses in applications.
  • Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC).
  • Enable appropriate API security controls as per the application landscape.
  • Identify and implement the appropriate SAST,DAST technologies to drive secure coding practise.
  • Implement and maintain security controls to protect the organization's applications from security threats and vulnerabilities.
  • Conduct regular security assessments and code reviews to identify and remediate application security risks.
  • Engage with application team at various level to build a program to ensure ZERO vulnerabilities are reaching the production environment.


2.Vulnerability Management:

  • Manage the organization's vulnerability management program, including vulnerability scanning, assessment, and remediation.
  • Prioritize vulnerabilities based on risk assessment and business impact, and ensure timely remediation.
  • Implement and maintain vulnerability scanning tools and technologies to continuously monitor the organization's infrastructure.
  • Identify and implement the appropriate VM platform to drive secure coding practise.
  • Manage the organization's vulnerability management program, including vulnerability scanning, assessment, and remediation.
  • Prioritize and drive to remediate vulnerabilities based on risk assessment and business impact.


3.Security Testing and Assessment:

  • Conduct penetration testing, vulnerability assessments, and other security tests to identify and assess security risks.
  • Analyze test results and collaborate with relevant teams to address identified vulnerabilities and weaknesses.


4.Secure Coding Practices:

  • Promote secure coding practices among development teams and provide guidance on implementing security controls and mitigating vulnerabilities.
  • Develop and deliver training programs to educate developers on secure coding principles and techniques.
  • Ensure code repository is monitored and protected against unauthorized access and code leakage


5.Threat Modelling:

  • Develop and Perform threat modelling exercises to identify potential security threats and risks to applications and infrastructure.
  • Work with development teams to incorporate threat modelling into the design and development process.


6.Incident Response and Investigation:

  • Assist in incident response activities related to application security incidents, including analysis, containment, and remediation.
  • Conduct post-incident investigations to identify root causes and lessons learned, and implement improvements to prevent future incidents.


7.Security Awareness and Communication:

  • Raise awareness of application security risks and best practices among stakeholders and end-users through communication and training initiatives.
  • Serve as a subject matter expert on application security topics and provide guidance and support to internal teams.


8.Security Tooling and Automation :

  • Evaluate, deploy, and manage security tooling and automation solutions to enhance the efficiency and effectiveness of application security processes. Implement continuous integration/continuous deployment (CI/CD) pipelines with integrated security testing and validation checkpoints.


Key Skills and Qualifications:


  • Bachelor's degree in Information Security, Computer Science, or related field. Advanced degree or relevant certifications (e.g., CISSP, CSSLP, CEH) preferred.
  • Extensive experience in application security, including secure coding practices, vulnerability management, and security testing.
  • Strong understanding of web application security vulnerabilities (e.g., OWASP Top 10) and common attack vectors.
  • Experience with vulnerability scanning tools such as Nessus, Qualys, or similar.
  • Knowledge of secure software development lifecycle (SDLC) practices and methodologies.
  • Proficiency in programming languages such as Java, Python, or C/C++, with the ability to review and understand code.
  • Excellent communication and collaboration skills, with the ability to work effectively with cross-functional teams.
  • Strong analytical and problem-solving abilities, with a keen attention to detail.
  • Ability to prioritize and manage multiple tasks in a fast-paced environment.

  • Head of Application Security

    3 weeks ago

    india Security Lit Full time

    Job Description: Join the forefront of cybersecurity innovation at Security Lit! We're on the hunt for a dynamic Application Security (AppSec) Manager Lead to steer our Information Security Team. This pivotal role focuses on Vulnerability Assessment and Penetration Testing within the BFSI sector. You’ll be leading a spirited team spread across the UK,...

  • Manager - Cyber Security

    3 weeks ago

    india Head Digital Works Full time

    We are looking for an experienced and highly skilled IT Security Manager. The ideal candidate will play a critical role in overseeing Enterprise and Cloud Security at Head Digital Works Roles & Responsibilities: Cloud Security Develop, implement, and manage cloud security strategies, policies, and procedures. Conduct and drive regular assessments of cloud...

  • Enterprise Application Head

    7 days ago

    india Neutrino Tech Systems (NTS AUTOMATION LABS PRIVATE LIMITED) Full time

    Job Description Enterprise Application Head with a focus on Salesforce.   Job description This specialized role focuses on maximizing the potential of the Salesforce platform to support and enhance business processes. The Enterprise Application Head (Salesforce) plays a pivotal role in driving Salesforce adoption, ensuring data accuracy, and leveraging the...

  • Senior Security Engineer

    4 weeks ago

    india TAC Security Full time

    Job Title: Senior Security Engineer - VAPT Location: Pune, India Company Description TAC Security is a global leader in vulnerability management that specializes in protecting Fortune 500 companies, leading enterprises, and governments worldwide. With its AI-based Vulnerability Management Platform ESOF (Enterprise Security in One Framework), TAC Security...

  • Senior Application Security Engineer

    2 months ago

    india IQMATRIX INFOWAYS SOLUTIONS PRIVATE LIMITED Full time

    Principal Accountabilities :- Lead by example and independently perform all functions and services of the GIS AppSec team.- Conduct advanced web application, micro-services, API, cloud penetration tests of proprietary and 3rd party on-prem/cloud systems and applications.- Perform targeted manual security reviews at key points in the software development life...

  • IT Security Analyst

    1 month ago

    india Info Origin Inc Full time

    Job Description : We are seeking a motivated and security-conscious individual to join our team and play a key role in securing our application landscape. You will be responsible for developing and maintaining system security plans (SSPs) in accordance with industry standards, ensuring our applications comply with security regulations.Responsibilities :-...

  • IT Security Analyst

    1 day ago

    india Info Origin Inc Full time

    Job Description : We are seeking a motivated and security-conscious individual to join our team and play a key role in securing our application landscape. You will be responsible for developing and maintaining system security plans (SSPs) in accordance with industry standards, ensuring our applications comply with security regulations.Responsibilities :-...

  • Head of Cloud Security Architecture

    1 month ago

    india VE3 Full time

    Job Description Title: Head of Cloud Security ArchitectureAbout the Company: VE3 is dedicated to building transformative solutions that significantly impact client operations. Our services span from initial strategy to ongoing enhancements, ensuring optimal performance and investment return.About the Role: As the Head of Cloud Security Architecture, you...

  • Senior Red Team Lead

    1 month ago

    india Security Lit Full time

    Job Description: We are looking for a skilled and experienced professional to join our Information Security Governance team as a Senior Infrastructure, Application & Cloud Offensive Security Assessment expert. This role involves leading and executing comprehensive security assessments, including web application security testing, vulnerability assessment, and...

  • Application Security Specialist

    2 months ago

    india Revvity Full time

    As an Application Security Specialist, you will play a pivotal role in securing our applications and protecting our infrastructure from potential threats. Your responsibilities will include: SAST and DAST Testing: Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), review their outputs, and assist the...

  • Application Security Specialist

    2 weeks ago

    india Revvity Full time

    As an Application Security Specialist, you will play a pivotal role in securing our applications and protecting our infrastructure from potential threats. Your responsibilities will include: SAST and DAST Testing: Perform Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST), review their outputs, and assist the...

  • Application Security Lead

    4 weeks ago

    india TMF Group Full time

    We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website. About TMF Group TMF Group is a leading global provider...

  • Application Security Lead

    2 weeks ago

    india TMF Group Full time

    We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website. About TMF Group TMF Group is a leading global provider...

  • Application Security Engineer

    3 weeks ago

    india NielsenIQ Full time

    NielsenIQ is maturing its Application Security programs and is recruiting an Application Security Engineer who will be responsible for supporting the rollout of DevSecOps capabilities and practises across all geographies and business units. As the Application Security Engineer, you will be responsible for integration, maintenance and analyses of the tools...

  • Security Architect

    2 months ago

    india Pylon Management Consulting Full time

    Requirements : Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Proven experience as a Security Architect or a similar role. Strong controls framework understanding and experience and advanced knowledge of application security assessments. Experience in vulnerability management, threat assessments, or a...

  • Regional Head Sales

    1 month ago

    india IBSFINCORP Full time

    Company Description IBSFINCORP is an industry leader in providing loan facilities to over 300 Micro, Small, and Medium Enterprises (MSMEs) for the past decade. We partner with top banks and NBFCs to offer a wide range of secured loan options, including Loan Against Property, Working Capital Loans, Home Loans, and more. Role Description This is a full-time...

  • IT Application Security Champion

    2 days ago

    India Hireflex247 India Full time

    **IT Application Security Champion**: Location: Bangalore Remote **Please note this is a Senior Expert Role - Only if you have 5+ years of experience and have the necessary certification only apply.** - You will be working for Premium Client - a Global French multinational information technology services and consulting company_ - Must have worked with...

  • Security Governance and Compliance Head

    4 weeks ago

    india Agratas Full time

    Job Title: Security Governance and Compliance Head Job Description: We are seeking a highly skilled person with minimum 10 years experience to join our team as Security Governance and Compliance Head. The ideal candidate will be responsible for developing, implementing, and managing security policies and compliance programs to ensure the protection of our...

  • Application Security Engineer

    1 month ago

    india eJAmerica Full time

    Job Description Experience Required - 8+ Familiarity with Noname and other API monitoring tools, Dynatrace Application Security, and Wiz for cloud security posture management (CSPM). Understand common application attack vectors such as the OWASP Top 10s for application security, APIs, mobile, and cloud. Collect alerts and use discovered data to enable...

  • Head- Enterprise Application

    1 month ago

    india Shalina Healthcare Full time

    About Shalina Healthcare: Shalina Healthcare is one of the largest pharmaceutical companies in sub-Saharan Africa. Forthe last 40 years, across over 20 countries, we have made it our mission to provide quality medicines & brands to those who need it the most. Wemanufacture and distribute branded prescription, over-the-counter pharmaceutical and consumer...