Application Security Manager

Experian; Hyderabad; On-site; INR 400,000 - 900,000; Full time

Job summary

Experian is seeking a Senior Application Security Lead in Hyderabad, India, to mentor engineers and guide the secure software lifecycle. You will oversee SAST/DAST/CI security, drive risk governance, and partner with risk/compliance teams to meet audits.

Strong leadership and cloud security experience are essential to advance our enterprise security program. Experience mentoring teams, shaping strategy, and coordinating across development and security stakeholders is required.

Qualifications

• Four-year college diploma or degree in computer science or computer engineering, and/or 5 years equivalent experience.
• Preferred certifications OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar.
• 3+ years of experience; 8+ years in enterprise‑level application security.
• Experience leading teams of penetration testers encouraged.
• Experience with cloud-based application architectures.

Responsibilities

• Lead and mentor a team of application security engineers and penetration testers.
• Guide team members' daily project and operational activities.
• Manage and mature the application security program through direct interactions.
• Set strategies and oversee SAST, SCA, DAST, and pen testing operations.

Skills

Application security

Team leadership

Mentoring

Penetration testing

Risk governance

OWASP Top 10

Cloud security

Education

Bachelors in CS/CE

Tools

SAST

DAST

SCA

Cloud security platforms

Job description

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more. Experian invests in people and new advanced technologies to unlock the power of data. We have an amazing team of 25,200 people in 32 countries.

Job Description

• Lead and mentor a team of application security engineers and penetration testers.
• Guide team members' daily project and operational activities
• Manage and mature the application security program through direct interactions.
• Actively seek to improve our application security and penetration testing operations.
• Identify improvement opportunities in all processes and activities involved.
• Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy.
• Appropriately assess risk and provide software security advice when business decisions are made.
• Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio.
• Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques.
• Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services.
• Manage test resources to ensure maximum performance.
• Ensuring secure outcomes of application and configuration testing.
• Oversee vulnerability identification and measurement.
• Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues.
• Operate as an advocate for Security in interactions with internal and external teams.
• Work with Risk & Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security
• Lead projects to implement security technologies for the entire enterprise.
• Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community.
• Help the enterprise manage vulnerabilities across automated tooling and manual security assessments.
• Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner.
• Support the AppSec technical team and ensure relationships with Business and team maximised.

Qualifications

• Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development.
• Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.
• 3+ years of experience.
• 8+ years of experience in enterprise-level applications security.
• Previous experience leading teams of penetration testers strongly encouraged
• Experience with cloud-based application architectures

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning; World's Best Workplaces 2025 (Fortune Global Top 25), Great Place To Work in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affiantive Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.