Application Security Manager

Serasa Experian; Hyderabad; Hybrid; INR 3,000,000 - 5,500,000; Full time

Job summary

Experian is seeking a seasoned security leader in Hyderabad to steer a team of application security engineers and penetration testers. You will guide daily operations, mature the security program, and drive risk-informed decisions across the enterprise.

You will oversee SAST, SCA, DAST and pentesting, collaborate with risk/compliance, and act as SME for application, network and cloud security. A strong mentorship ethos and track record in securing complex software systems are essential.

Qualifications

• Four-year college diploma or university degree in computer science or computer engineering; or 5 years equivalent work experience in application development.
• OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.
• 3+ years of experience and 8+ years of experience in enterprise-level applications security.

Responsibilities

• Lead and mentor a team of application security engineers and penetration testers.
• Guide team members' daily project and operational activities.
• Manage and mature the application security program through direct interactions.
• Oversee SAST, SCA, DAST, and penetration testing operations.
• Provide security guidance during business decisions and risk governance.

Skills

Team leadership

Application security

Penetration testing

Cloud security

Risk governance

Education

Bachelors in CS/CE

Tools

Cloud platforms

Security testing tools

Job description

Job Description:

Company Description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.

Job Description

• Lead and mentor a team of application security engineers and penetration testers.
• Guide team members' daily project and operational activities
• Manage and mature the application security program through direct interactions.
• Actively seek to improve our application security and penetration testing operations.
• Identify improvement opportunities in all processes and activities involved.
• Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy.
• Appropriately assess risk and provide software security advice when business decisions are made.
• Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio.
• Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques.
• Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services.
• Manage test resources to ensure maximum performance.
• Ensuring secure outcomes of application and configuration testing.
• Oversee vulnerability identification and measurement.
• Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues.
• Operate as an advocate for Security in interactions with internal and external teams.
• Work with Risk & Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security
• Lead projects to implement security technologies for the entire enterprise.
• Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community.
• Help the enterprise manage vulnerabilities across automated tooling and manual security assessments.
• Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner.
• Support the AppSec technical team and ensure relationships with Business and team maximised.

Qualifications

• Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development.
• Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.
• 3+ years of experience.
• 8+ years of experience in enterprise-level applications security.
• Previous experience leading teams of penetration testers strongly encouraged
• Experience with cloud-based application architectures

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Aff

Recruitment Fraud Awareness - Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.

Experian Careers - Creating a better tomorrow together

• Employee Status: Regular
• Role Type: Hybrid
• Department: Information Security
• Schedule: Full Time