- Must have 9-10 years of hands-on experience in cybersecurity domain.

- Proven experience in security architecture assessments and secure-by-design implementations.

- Experience with enterprise security frameworks and methodologies.

- Deep understanding of security architecture principles and frameworks

- Proficiency in threat modeling methodologies (STRIDE, PASTA)

- Deep, hands-on knowledge of the OWASP Top 10, OWASP ASVS, and OWASP SAMP/SAMM maturity practices.

- Robust understanding of secure coding practices across common stacks (e.g., Java, .NET, Python, JavaScript/Node.js) and the ability to review code for security defects.

- Expertise in API security, including OAuth 2.0, OpenID Connect, and secure token handling.

- Familiarity with authentication/authorization protocols, secrets management, and cryptographic best practices at the application layer.

- Experience with software supply-chain security, dependency/vulnerability management, and SBOM practices.

- Knowledge of container and cloud-native application security (image scanning, runtime protection, secure configuration).

- Knowledge of security controls and standards (NIST, ISO 27001, CIS Controls)

📌 Application Security Lead (Mumbai)
🏢 Symphoni HR
📍 Mumbai