Practice Head ?

Application

Security, Red Teaming, &

- Threat/Vulnerability Management (TVM)

Location: India (Major Tech Hubs: Bengaluru / Mumbai / NCR / Hyderabad / Pune)

Experience Required: 10?15 Years

Employment Type: Full-time, Permanent

Position Overview

We are seeking a visionary, highly technical, and strategically minded Practice Head to lead, scale, and mature our Application Security (AppSec), Red Teaming, and Threat &

- Vulnerability Management (TVM) cybersecurity division.

In this senior leadership role, you will take full ownership of the practice, driving technology roadmaps, managing P&L;, nurturing top-tier offensive security talent, and acting as a trusted advisor to executive stakeholders. You will balance a deep technical background in adversary simulation and secure software development with strong business acumen to protect our enterprise ecosystem and clients.

Key Responsibilities

- Practice Leadership &
- Strategy
- Define the vision and strategy for the AppSec, Red Teaming, and TVM service offerings, aligning them with overall enterprise risk management goals.
- Oversee practice growth, resource allocation, budgeting, tool evaluation, and vendor partnerships.
- Establish modern delivery methodologies, frameworks, playbooks, and standardized reporting structures for offensive operations.
- Serve as a thought leader, representing the firm at cybersecurity conferences and driving internal security advocacy.
- Technical Governance &
- Execution
- Application Security (AppSec): Drive Secure SDLC practices by embedding threat modeling, secure code reviews (SAST), dynamic testing (DAST), and Software Composition Analysis (SCA) into advanced CI/CD DevSecOps pipelines.
- Red Teaming &
- Adversary Simulation: Oversee sophisticated cyber-attack simulations across cloud environments (AWS/Azure/GCP), complex Active Directory setups, and network architectures using frameworks like MITRE ATT&CK.;
- Threat &
- Vulnerability Management (TVM):



Architect enterprise-wide vulnerability discovery, prioritization, validation, and remediation programs. Ensure seamless transition of threat intelligence into proactive testing parameters.
- Team Management &
- Mentorship
- Lead, mentor, and upscale a high-performing team of ethical hackers, AppSec engineers, and security analysts.
- Build a continuous-learning culture focused on reverse engineering, exploit development, and emerging threat research.
- Stakeholder &
- Cross-Functional Alignment
- Translate highly technical vulnerability and attack path findings into clear, business-relevant risk profiles for engineering leads and C-suite executives.
- Coordinate with DFIR, SOC, and Threat Intelligence teams during active incident response or post-assessment reviews.

Required Skills And Qualifications Education &

- Experience

- Bachelor?s or Master?s degree in Computer Science, Cyber Security, Information Technology, or a related field.
- 10?15 years of deep hands-on experience across offensive security, application testing, and enterprise vulnerability management.
- Minimum 3?5 years of experience leading and scaling cybersecurity teams or practices in India.

Technical Proficiencies

- Core Methodologies: Expert knowledge of OWASP (Web/API/Mobile Top 10), SANS Top 25, MITRE ATT&CK; framework, and NIST standards.
- Offensive Security Tooling: In-depth knowledge of platforms like Burp Suite, Metasploit, Cobalt Strike, Qualys, Nessus, and Checkmarx.
- Cloud &
- Infrastructure: Proven architecture security knowledge of AWS, Azure, or GCP alongside containerized security (Kubernetes/Docker).
- Automation: Scripting fluency in Python, PowerShell, Bash, or Go to customize attack payloads and automate security tests.

Preferred Skilled Certifications Candidate must possess one or more recognized advanced credentials:

- Offensive: OSCP (Mandatory/Highly Preferred), OSCE, OSWE, GXPN, CRTO.
- Management/Governance: CISSP, CISM, or equivalent.

Vulnerability Assessment

📌 DIRECTOR - Application Security (Bengaluru)
🏢 Happiest Minds Technologies
📍 Bengaluru