Role & Responsibilities
Conduct regular security assessments (SAST/SCA/DAST) utilizing both automated and manual methods to identify security vulnerabilities
Responsible for assessing the risk of the found vulnerabilities as per Company Security Standards and documenting them with proper proof of concepts, as necessary
Perform security design and architectural reviews for recent and existing applications to ensure they meet security standards and best practices.
Collaborate with technical teams and business stakeholders to provide expert advice on vulnerability remediation strategies and best practices.
Assess risks reported in the vulnerability assessment results and other security related data, and prioritize remediation actions Integrate security practices into the CI/CD pipeline to identify and address vulnerabilities early in the development cycle and maintain the tooling in the CICD pipeline
Identify and implement automation opportunities within security testing and review processes to enhance efficiency and effectiveness.
Awareness of working and adapting to Agile setting
Have knowledge of standards like ISO 27001, PCI & DPDPA





Qualifications & Skills :
A bachelors or higher degree in Computer Science, Computer Engineering, or similar discipline.
Minimum 10+ years of hands-on experience in application security and 6 years in DevSecOps, and extensive knowledge in any one of the object-oriented programming languages.
Robust Information Security technical skills and knowledge to identify, research and understand security control gaps and program compliance issues.
Strong web application security experience with thorough understanding of web application vulnerabilities and secure coding practices
Demonstrated experience in performing threat modelling, security architecture review, and vulnerability assessment on applications and infrastructure

Pay: ₹2,000,000.00 - ₹2,300,000.00 per year

Application Question(s):
How many years of hands-on experience do you have in Application Security?
How many years of experience do you have in DevSecOps?
Current CTC?
Notice Period?

Work Location: In person

📌 General Manager Application Security Chembur
🏢 Risosu Consulting
📍 Chembur