Responsibilities
Leadership and Strategy Development:
- Oversee the organization's application security initiatives, ensuring alignment with business goals and risk management strategies.
- Define and implement strategies to protect applications across their entire lifecycle—from design to deployment and beyond.
- Manage and mentor a team of application security professionals, including security engineers and analysts, to build a robust application security culture within the organization.
- Collaborate with senior management, development teams, product teams, and IT to ensure alignment on security priorities and initiatives.
Risk Management:
- Evaluate the security posture of applications and assess potential risks, such as data breaches, vulnerabilities, and exploitation tactics.
- Proactively identify potential threats and assess how the application’s architecture could be targeted by cybercriminals.
- Develop and recommend remediation strategies to minimize risk exposure.
Secure Software Development Lifecycle (SDLC):
- Ensure that security is embedded throughout the software development lifecycle (SDLC), including design, coding, testing, and deployment.
- Perform code reviews, static/energetic analysis, and penetration testing to identify vulnerabilities in applications.
- Work with developers to integrate secure coding practices, secure design principles, and appropriate security controls into application development.
Application Security Testing and Tools:
- Oversee the implementation and execution of security testing activities, such as automated scanning, vulnerability assessments, and penetration testing.
- Select and implement the appropriate security tools (e.g., Static Application Security Testing (SAST), Agile Application Security Testing (DAST), Software Composition Analysis (SCA)) to identify vulnerabilities in applications.
- Coordinate remediation efforts and track the status of vulnerabilities found in applications, ensuring timely fixes.
Comp
📌 Application Security Head (Mumbai)
🏢 Adani
📍 Mumbai