Application Security Manager - Software Product Development Firm (10-18 yrs)

We are Hiring for one of the Top Most Software Product Development Company I. Hyderabad.

Role: Application Security Manager

Skills:

Summary of Primary Responsibilities:

- Oversee and deliver Application Security Assessment services.

- Lead, mentor, and manage a team of application security engineers and penetration testers, ensuring effective daily operations.

- Maintain and update set of metrics to reflect efficiency and effectiveness of the program and bring visibility to security posture of applications and Experian teams.

- Mature the security testing program by identifying areas for improvement, developing and implementing enhancement projects, and continuously refining processes

- Participate in strategic planning to integrate risk governance and provide software security advice for business decisions.

- Develop strategies and oversee operations for penetration testing, ensuring secure application and configuration testing outcomes.

- Be a subject matter expert in application, network, and cloud penetration testing.

- Execute a comprehensive security testing strategy, optimizing test resource performance.

- Oversee vulnerability identification and measurement, collaborating with software engineers and leadership to address security risks.

- Maintain and collaborate with the Security Champion and partners network, assessing applications against common flaws like OWASP Top 10.

Qualifications:

- 8+ years of experience in enterprise-level applications security. 3+ years of experience in security organization preferred, 2 years experience in leading pen testing team.

- In-depth knowledge of penetration testing tools and methodologies including cloud-based application architectures. Experience offensive focused automation tools. SAST, DAST, Software Composition Analysis (SCA), IAST, RASP tooling, Experience im DevSecOps, CI/CD pipelines is also a plus. Experience with AI/ML/LLM pen testing is desired

- Experience overseeing the linking of cross-functional applications between disparate business units and systems and good project management skills and/or substantial exposure to project-based work structures, project lifecycle models, etc.

- Experience with business and technical requirements analysis, business process modelling/mapping, methodology development, and data mapping.

- Strong understanding and background in MITRE, OWASP, SafeCode, risk management methodologies as they relate to integration/software testing.