Application Security Manager

Coventine Digital; Chennai District, Bengaluru, Pune District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Coventine Digital in India is seeking a Manager – Application Security (AppSec / DevSecOps) to lead security programs across projects in Chennai, Bengaluru, Pune and Noida.

The role demands 8+ years of relevant experience, expertise in SAST/DAST/SCA, threat modeling, secure SDLC, and hands-on CI/CD security within Agile teams. You will mentor engineers and align security with OWASP standards.

Qualifications

• Experience in Application Security (AppSec) and DevSecOps.
• Proficient with SAST, DAST and SCA.
• Experience in Source Code Review.
• Strong Threat Modeling capabilities.
• Knowledge of Secure SDLC and Shift-Left Security.
• Experience integrating security into CI/CD pipelines.
• Familiar with OWASP standards.
• Proficiency with scripting languages such as Python, PowerShell, Java or Perl.

Responsibilities

• Lead large-scale AppSec and DevSecOps programs.
• Define and implement secure CI/CD pipelines.
• Drive Shift-Left Security across Agile development teams.
• Integrate SAST, DAST, SCA, IAST, API Security, secret scanning, and vulnerability management into CI/CD pipelines.
• Conduct Source Code Reviews and Threat Modeling.
• Provide technical leadership and mentor junior AppSec engineers.
• Collaborate with development teams to implement secure coding practices and OWASP alignment.
• Define DevSecOps maturity models and optimize security automation.
• Track, prioritize, and drive remediation of application security vulnerabilities.
• Communicate security risks and recommendations to technical teams and stakeholders.

Skills

AppSec

DevSecOps

Threat Modeling

Secure SDLC

CI/CD Security

Source Code Review

Python

PowerShell

Java

Perl

Education

BE / B.Tech / MCA

Tools

Checkmarx

Fortify

Veracode

Snyk

Coverity

Burp Suite

HCL AppScan

HP WebInspect

Acunetix

GitHub

GitLab

Bitbucket

Job description

Dear Candidate,

Greetings from Coventine Digital!

We have an exciting opportunity with our esteemed clientfor the role ofManager Application Security (AppSec / DevSecOps).

Role Details

• Role:Manager – Application Security (AppSec / DevSecOps)
• Experience: 8+ Years of Relevant Experience
• Location:Chennai / Bangalore / Pune / Noida
• Qualification:BE / B.Tech / MCA

Mandatory Skills

• Application Security (AppSec)
• DevSecOps
• SAST, DAST & SCA
• Source Code Review
• Threat Modeling
• Secure SDLC & Shift-Left Security
• CI/CD Security
• Checkmarx, Fortify, Veracode, Snyk, Coverity
• Burp Suite, HCL AppScan, HP WebInspect, Acunetix
• GitHub, GitLab, Bitbucket
• Python / PowerShell / Java / Perl

Key Responsibilities

• Lead and execute large-scale Application Security and DevSecOps programs.
• Define and implement secure DevSecOps CI/CD pipelines using open-source tools.
• Drive Shift-Left Security initiatives across Agile development teams.
• Integrate SAST, DAST, SCA, IAST, API Security, secret scanning, and vulnerability management into CI/CD pipelines.
• Conduct Source Code Reviews and Threat Modeling.
• Provide technical leadership and mentor junior Application Security engineers.
• Collaborate with development teams to implement secure coding practices and ensure compliance with OWASP standards.
• Define DevSecOps maturity models and optimize security automation.
• Track, prioritize, and drive remediation of application security vulnerabilities.
• Communicate security risks and recommendations effectively to technical teams and senior stakeholders.

Preferred Skills

• Java, JavaScript, Python, Angular
• Windows, Linux, UNIX
• API Security
• Agile/Scrum
• Strong stakeholder management and leadership experience