Manager - Application Security

Liminal Custody Solutions

5 - 8 years

7 - 11 Lacs

hubli mangaluru mysuru bengaluru belgaum

Posted:9 hours ago| Platform:

Apply

Skills Required

maven c++ testing tools coding soc javascript agile application security jira sdlc

Work Mode

Work from Office

Job Type

Full Time

Job Description

Program Leadership:

Lead and manage the application security program, aligning with the overall security strategy and business objectives.

Secure SDLC Integration:

Integrate security tools, standards, and processes into the product lifecycle (SDLC, CI/CD), ensuring security is embedded from design through deployment.

Security Assessments & Testing:

Oversee and conduct application security assessments, including static and dynamic analysis, manual and automated penetration testing, and code reviews.

Vulnerability Management:

Manage the process for identifying, prioritizing, and remediating application vulnerabilities in collaboration with engineering and product teams.

Threat Modeling & Risk Analysis:

Lead threat modeling and risk analysis activities for new and existing applications, ensuring security requirements are defined and addressed early in the development process.

Policy & Standards Development:

Develop, maintain, and improve secure development standards, policies, and guidelines; ensure compliance with regulatory and industry standards (e.g., PCI, SOX, ISO27001).

Incident Response Support:

Provide application security expertise during incident response and architecture review processes as needed.

Training & Awareness:

Train and mentor developers, QA, and other stakeholders on secure coding practices, secure design, and emerging threats.

Metrics & Reporting:

Produce and communicate metrics and reports on the state of application security, including program effectiveness and development team performance against security requirements.

Vendor & Third-Party Security:

Support vendor security reviews to ensure third-party software and services meet organizational security standards.

Desired Candidate Profile:

5 - 8 years of experience in application security, software development, or related roles, with a strong track record managing or leading application security programs.
Deep understanding of common application vulnerabilities (e.g., OWASP Top 10), secure coding practices, and application security testing methodologies.
Hands-on experience with security tools such as SAST, DAST, IAST, SCA, and penetration testing frameworks.
Proficiency in at least one major programming language (e.g., Java, C/C++, JavaScript) and familiarity with modern development and testing tools (e.g., Git, JIRA, Maven).
Experience integrating security into agile and waterfall development processes.
Strong leadership, communication, and stakeholder management skills, with the ability to influence and educate both technical and non-technical audiences.
Experience with regulatory and industry standards (PCI, SOX, ISO27001, etc.).
Ability to translate security and risk concepts into actionable requirements for diverse audiences.

Preferred Qualifications:

Relevant certifications (e.g., CISSP, CISM, OSCP, CSSLP, SANS GIAC)
Experience managing budgets and multi-year roadmaps for security initiatives
Background in highly regulated industries (e.g., financial services) is a plus.
Experience with cloud-native application security and DevSecOps practices.

Mock Interview

Practice Video Interview with JobPe AI

Start JavaScript Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.