Role & Responsibilities

- Conduct regular security assessments (SAST/SCA/DAST) utilizing both automated and manual methods to identify security vulnerabilities

- Responsible for assessing the risk of the found vulnerabilities as per Company Security Standards and documenting them with proper proof of concepts, as necessary

- Perform security design and architectural reviews for new and existing applications to ensure they meet security standards and best practices.

- Collaborate with technical teams and business stakeholders to provide expert advice on vulnerability remediation strategies and best practices.

- Assess risks reported in the vulnerability assessment results and other security related data, and prioritize remediation actions Integrate security practices into the CI/CD pipeline to identify and address vulnerabilities early in the development cycle and maintain the tooling in the CICD pipeline

- Identify and implement automation opportunities within security testing and review processes to enhance efficiency and effectiveness.

- Awareness of working and adapting to Agile environment

- Have knowledge of standards like ISO 27001, PCI & DPDPA





Qualifications &

Skills :

- A bachelors or higher degree in Computer Science, Computer Engineering, or similar discipline.

- Minimum 10+ years of hands-on experience in application security and 6 years in DevSecOps, and extensive knowledge in any one of the object-oriented programming languages.

- Strong Information Security technical skills and knowledge to identify, research and understand security control gaps and program compliance issues.

- Solid web application security experience with thorough understanding of web application vulnerabilities and secure coding practices

- Demonstrated experience in performing threat modelling, security architecture review, and vulnerability assessment on applications and infrastructure

Pay: ₹2,000,000.00 - ₹2,300,000.00 per year

Application Question(s)

- How many years of hands-on experience do you have in Application Security?

- How many years of experience do you have in DevSecOps?

- Current CTC?

- Notice Period?

Work Location: In person

📌 General Manager -Application Security (Chembur)
🏢 Risosu Consulting
📍 Chembur