Cyber Security Specialist-Application Security- Non Auto

AboutTVS / Who are we?

TVS Motor Company is a reputed two and three-wheelermanufacturer globally, championing progress through Sustainable Mobility withfour state-of-the-art manufacturing facilities in Hosur, Mysuru and Nalagarh inIndia and Karawang in Indonesia. Rooted in our 100-year legacy of Trust, Value, and Passion for Customers and Exactness, we take pride in makinginternationally aspirational products of the highest quality through innovativeand sustainable processes. We are the only two-wheeler company to have receivedthe prestigious Deming Prize. Our products lead in their respective categoriesin the J.D. Power IQS and APEAL surveys. We have been ranked No. 1 Company in/the J.D. Power Customer Service Satisfaction Survey for consecutive fouryears. Our group company Norton Motorcycles, based in the United Kingdom, isone of the most emotive motorcycle brands in the world. Our subsidiaries in thepersonal e-mobility space, Swiss E-Mobility Group (SEMG) and EGO Movement havea leading position in the e-bike market in Switzerland. TVS Motor Companyendeavours to deliver the most superior customer experience across 80 countriesin which we operate.

For more information, please visit www.tvsmotor.com .

Job Title / Role :

Department: D & AI (H)

Location: Electronic City

Education Qualification : Bachelors or Mastersdegree

Required Experience:

Collaboratewith development teams to identify and address security gaps early in SDLC.

Reviewthe architecture and conduct threat modelling to identify threats and risks.

Prioritizeand guide remediation efforts for mitigating the identified risks.

Promotesecure coding practices through collaboration & developer training.

Implementautomated security testing in CI/CD pipelines.

Performsecurity assessment of the applications or the features being developed.

Supportteams in resolving vulnerabilities found during security assessment

Partnerwith DevOps and infrastructure teams to ensure secure application delivery.

Constantlyimprove the application security posture from both tech and processperspectives.

Conductregular security audits and assessments to ensure that Applications/APIs aresecure.

Respondto security incidents and provide technical support as required.

Assistand respond to internal/external audits and ensure compliance with security standards.

Stayup to date with the latest security trends and technologies.

Monitoremerging AI-related threats, risks, and assess their impact on applicationsecurity.

Required Skills:

Strongunderstanding of security principles across the Software Development Lifecycle(SDLC), with the ability to embed security from design to deployment.

Experiencein software development to effectively collaborate with engineering teams.

Knowledgeof threat modeling methodologies (e.g., STRIDE, DREAD, PASTA )

Skilledin manual and automated code reviews for secure coding compliance.

Hands-onexperience with security tools like SAST, SCA and triaging the issues.

Hands-onexperience with testing Web Applicationsand Mobile Applications to identify Security loopholes

Deepunderstanding of API security and testing common vulnerabilities.

Goodunderstanding of Cloud Security (AWS, Azure etc.)

Understandingof OWASP Top 10, CWE and mitigation strategies.

Understandingof AI/ML security risks and mitigation strategies.

Strongproblem-solving and analytical thinking.

Excellentcommunication and teamwork in diverse environments.

Abilityto align security efforts with business goals and customer needs.

Preferred Qualifications:

BachelorsDegree in Computer/Information Science; Information Technology; Cyber Security

5+ years of experience in Application Security

Industrycertifications such as CSSLP, CISSP etc. would be an added advantage.