19 Aug
|
AtkinsRéalis
|
Bengaluru
19 Aug
AtkinsRéalis
Bengaluru
Job Description
Overview
The Global Application Security & DevSecOps Lead is responsible for, operating and continuously improving the organisation’s application security function across the complete software development lifecycle.
The role owns the policies, technical standards, engineering controls, security testing services, Azure DevOps integrations, application security platforms and governance processes required to ensure that internally developed and externally supplied applications are designed, built, tested and released securely.
This is both a leadership and hands-on engineering role. The role holder must be capable of defining the global AppSec strategy while also configuring, integrating, operating, troubleshooting and improving the underlying security tools.
The role will embed automated and risk-based security controls into Azure DevOps repositories and CI/CD pipelines at enterprise scale, covering potentially hundreds of Azure DevOps projects and thousands of repositories.
The role is accountable for ensuring that security controls are:
Technically effective.
Integrated into engineering workflows.
Proportionate to application risk.
Reliable enough to support mandatory release gates.
Properly tuned to minimise false positives.
Measurable and auditable.
Supported by transparent operating procedures.
Adopted consistently across global development teams.
Your role
Principal accountabilities
AppSec strategy and operating model
The role holder will:
Maintain the global Application Security and DevSecOps strategy.
Establish the AppSec function’s mandate, service catalogue, governance model and engagement process.
Define the division of responsibilities between AppSec, engineering, cloud security, architecture, SOC, vulnerability management, risk and compliance.
Develop a risk-based AppSec control framework for different application types and criticality levels.
Establish minimum security requirements for internally developed, externally developed and SaaS applica
📌 Application Security Lead (Bengaluru)
🏢 AtkinsRéalis
📍 Bengaluru