Manager - Application Security

Responsibilities:

• Lead application security assessments and manage SSDLC engineers.
• Drive secure coding, vulnerability management and remediation.
• Integrate and manage SAST/DAST/SCA tools across CI/CD pipelines.
• Establish security quality gates and code-review standards.
• Track security vulnerabilities, metrics and remediation.
• Conduct security training for developers and security teams.
• Support audits, risk assessments and security control reviews.
• Collaborate with development, PMO and business stakeholders.
• Provide SME guidance on application security tools and controls.

Requirements:

• 7+ years of experience in Application Security, including 2+ years of technical team leadership.
• Strong experience in SSDLC, Secure Coding, DevSecOps and CI/CD.
• Hands-on knowledge of SAST, DAST, SCA and application security testing.
• Experience integrating security tools into DevOps/CI/CD pipelines.
• Strong understanding of OWASP, SANS, NIST, MITRE, Security by Design and Privacy by Design.
• Knowledge of Microservices Security, API Security and AI Security.
• Good understanding of SSL/TLS, PKI, HSM, encryption, key and secrets management.
• Cloud/SaaS application security experience is desirable.
• Experience managing, mentoring and leading Application/SSDLC Security teams.
• Preferred Certifications: CISSP, CISA, CISM, CCSP, CSSLP, CEH, ISO 27001, API Security Architect or similar.