About the role
Responsibilities:
- Lead application security assessments and manage SSDLC engineers.
- Drive secure coding, vulnerability management and remediation.
- Integrate and manage SAST/DAST/SCA tools across CI/CD pipelines.
- Establish security quality gates and code-review standards.
- Track security vulnerabilities, metrics and remediation.
- Conduct security training for developers and security teams.
- Support audits, risk assessments and security control reviews.
- Collaborate with development, PMO and business stakeholders.
- Provide SME guidance on application security tools and controls.
Requirements:
- 7+ years of experience in Application Security, including 2+ years of technical team leadership.
- Strong experience in SSDLC, Secure Coding, DevSecOps and CI/CD.
- Hands-on knowledge of SAST, DAST, SCA and application security testing.
- Experience integrating security tools into DevOps/CI/CD pipelines.
- Strong understanding of OWASP, SANS, NIST, MITRE, Security by Design and Privacy by Design.
- Knowledge of Microservices Security, API Security and AI Security.
- Good understanding of SSL/TLS, PKI, HSM, encryption, key and secrets management.
- Cloud/SaaS application security experience is desirable.
- Experience managing, mentoring and leading Application/SSDLC Security teams.
- Preferred Certifications: CISSP, CISA, CISM, CCSP, CSSLP, CEH, ISO 27001, API Security Architect or similar.