• Must have 9-10 years of hands-on experience in cybersecurity domain.

- Proven experience in security architecture assessments and secure-by-design implementations.
- Experience with enterprise security frameworks and methodologies.
- Deep understanding of security architecture principles and frameworks
- Proficiency in threat modeling methodologies (STRIDE, PASTA)
- Deep, hands-on knowledge of the OWASP Top 10, OWASP ASVS, and OWASP SAMP/SAMM maturity practices.
- Solid understanding of secure coding practices across common stacks (e.g., Java, .NET, Python, JavaScript/Node.js) and the ability to review code for security defects.
- Expertise in API security, including OAuth 2.0, OpenID Connect, and secure token handling.
- Familiarity with authentication/authorization protocols, secrets management, and cryptographic best practices at the application layer.
- Experience with software supply-chain security, dependency/vulnerability management, and SBOM practices.
- Knowledge of container and cloud-native application security (image scanning, runtime protection, secure configuration).
- Knowledge of security controls and standards (NIST, ISO 27001, CIS Controls)

📌 Application Security Lead (Mumbai)
🏢 Symphoni HR
📍 Mumbai