13 Aug
|
Magma HDI General Insurance
|
Mumbai
13 Aug
Magma HDI General Insurance
Mumbai
Role & responsibilities
A. Application Security
Program Management
- Lead and manage the enterprise Application Security Program, including policies, standards, procedures, and governance.
- Establish and drive Secure Software Development Lifecycle (SSDLC) practices across all application development initiatives.
- Ensure security requirements are integrated into design, development, testing, deployment, and maintenance activities.
Security Assessments & Testing
- Perform application security assessments, threat modeling, architecture reviews, and secure code reviews.
- Conduct hands-on security testing of web applications, APIs, thick-client applications, and CI/CD pipelines.
- Manage and optimize security testing tools including SAST, DAST, IAST, and Software Composition Analysis (SCA).
- Identify, prioritize, and validate remediation of application security vulnerabilities.
Secure Development & DevSecOps
- Define and implement controls to address OWASP Top 10, API Security Top 10, and secure coding risks.
- Provide guidance to development teams on secure coding standards,
authentication, authorization, encryption, and input validation.
- Integrate security controls and automated testing into DevSecOps and CI/CD processes.
Governance & Reporting
- Publish application security dashboards, metrics, and management reports.
- Coordinate with development, infrastructure, risk, and compliance teams to ensure security objectives are met.
- Provide regular status updates and presentations to the CISO and senior management.
- Liaise with the parent organization on application security governance and reporting requirements.
Team Leadership
- Lead and mentor application security vendor resources
- Drive developer security awareness and secure coding initiatives.
B. Infrastructure Vulnerability Management
Vulnerability Management
- Lead the enterprise Vulnerability Management Program across servers, endpoints, databases, network devices, cloud platforms, and security
📌 Lead Application Security (Mumbai)
🏢 Magma HDI General Insurance
📍 Mumbai