Job
Description
Role Overview: You will be responsible for Application Security Assurance Ops and will collaborate closely with architecture, product management, product engineering, program management, and GRC teams to design, build, and operate products (Web/API/Mobile) securely. You will play a pivotal role in making opinionated tools decisions, building security automation with a high developer empathy approach, and designing methodical DAST & VAPT ops with an automation-first approach. Key Responsibilities: - Assess and adopt a culture of DevSecOps and partner with the CICD team to integrate security tool gates as part of the development lifecycle. - Build security automation with high developer empathy & self-serviceability as first principles. - Design & operate remediation ops in an actively engaged model with product engineering teams. - Automate tracking & dashboarding to measure organizational vulnerability density & report effectiveness of the appsec program. - Partner with GRC to ensure risks are accurately assessed, managed, and remediation planning is effective. - Act as a security advisor to embed security into the product intervention. - Ensure security and privacy by design, including design process improvements, assessment of controls, data models, use of cryptography, and compliance and regulatory needs. - Lead automation initiatives within Security & GRC to simplify reporting, dashboarding & reduce audit fatigue. - Champion adoption of Agile practices with the Security team and build a product mindset within all members of the security team. Qualifications Required: - UG: Any Graduate - Key Skills: Product Management, Program Management, Web API, Fintech, Application Security, Web Technologies, DevSecOps, Product Engineering (Note: Company Profile details are omitted as they are not relevant to the job description) Role Overview: You will be responsible for Application Security Assurance Ops and will collaborate closely with architecture, product management, product engineering, program management, and GRC teams to design, build, and operate products (Web/API/Mobile) securely. You will play a pivotal role in making opinionated tools decisions, building security automation with a high developer empathy approach, and designing methodical DAST & VAPT ops with an automation-first approach. Key Responsibilities: - Assess and adopt a culture of DevSecOps and partner with the CICD team to integrate security tool gates as part of the development lifecycle. - Build security automation with high developer empathy & self-serviceability as first principles. - Design & operate remediation ops in an actively engaged model with product engineering teams. - Automate tracking & dashboarding to measure organizational vulnerability density & report effectiveness of the appsec program. - Partner with GRC to ensure risks are accurately assessed, managed, and remediation planning is effective. - Act as a security advisor to embed security into the product intervention. - Ensure security and privacy by design, including design process improvements, assessment of controls, data models, use of cryptography, and compliance and regulatory needs. - Lead automation initiatives within Security & GRC to simplify reporting, dashboarding & reduce audit fatigue. - Champion adoption of Agile practices with the Security team and build a product mindset within all members of the security team. Qualifications Required: - UG: Any Graduate - Key Skills: Product Management, Program Management, Web API, Fintech, Application Security, Web Technologies, DevSecOps, Product Engineering (Note: Company Profile details are omitted as they are not relevant to the job description)
