Team Member - Application Security Risk

Department : Information Risk Management

Grade : Manager / Sr. Manager

Experience : Minimum 4 years in application security and testing

Location : Thane

Job description

Responsibility:

• Lead, manage and provide guidance to a team of Application Security managers, testers/analysts and project leads;
• Develop and enhance processes around Application Security best practices, exceptions, workflow automation, DevSecOps etc.;
• Create, discuss and release dashboards and reports periodically to management, business owners and relevant stake holders including the internal and external auditors;
• Manage end-to-end application security life-cycle;
• Ensure that application security for existing/new applications is performed as per policy, track the compliance status, following up with application owners for closures of the security findings;
• Perform impact analysis on all application updates, and provide recommendations for applying them effectively;
• Plan and Scheduling of applications for calendar assessments, following up with application owners for details, tracking closures of the findings etc.;
• Co-ordinate and support vendors for external application penetration testing activities;
• Explain and articulate effectively the Risk/Vulnerabilities and weaknesses as per in the OWASP Top 10, CWE 25 and other known security standards to any audience and discuss impact and its effective controls/mitigation techniques.

Requirements:

• Bachelor or Graduate Degree in any discipline;;
• Knowledge of Security Standards such as OWASP, SANS, MITRE, CIS etc.;
• CEH, OSCP certifications preferred;
• Sound understanding of security technologies, common security threats and industry best practices;
• Strong project management skills (objective setting, communications, risk management, performance tracking, evaluation/measurement);
• Self-starter; consistently energetic, positive and proactive;
• Ability to convey technical information to senior management in a simple and unambiguous manner;
• Excellent analytical, communication and presentation skills.