Application Security Manager

ICICI Bank; Mumbai; In loco; INR 1.200.000 - 1.500.000; Tempo pieno

Descrizione del lavoro

A leading banking institution is seeking an Application Security Manager in Mumbai to lead vulnerability assessments and ensure compliance with security practices. The ideal candidate will have experience with tools like BurpSuite and Nessus, and possess a strong understanding of cybersecurity trends. This full-time role is critical in enhancing the overall security posture of the bank.

Competenze

• Experience in application vulnerability assessments and remediation.
• Working knowledge of network security technologies.
• Good understanding of latest cybersecurity technologies.

Mansioni

• Conduct vulnerability assessments and penetration testing.
• Review VAPT results and provide risk mitigation recommendations.
• Collaborate with the application team on security best practices.

Conoscenze

Vulnerability Assessments & Penetration Testing

Knowledge of cyber security trends & hacking techniques

Familiarity with OWASP and SANS vulnerabilities

Knowledge of Networking concepts

Formazione

Engineering Graduate in CS, IT, EC or related fields

Certification for OSCP

Strumenti

BurpSuite

Nessus

Nmap

Metasploit

Qualys

Descrizione del lavoro

At ICICI Bank, we believe in serving our customers beyond our role definition, product boundaries, and domain limitations through our philosophy of customer 360-degree. In essence, this captures our belief in serving the entire banking needs of our customers as One Bank, One Team. To achieve this, employees at ICICI Bank are expected to be role and location-fungible with the understanding that Banking is an essential service.

About the role

At ICICI Bank, Information Security Group believes in providing services to its customers in the safest and most secure manner keeping in mind that data protection for its customers is as important as providing quality banking services across the spectrum. Our support application team performs application vulnerability assessments and document vulnerabilities which were found and provides recommendations for remediation according to BFSI guidelines and industry best practices. As an Application Security Manager, you will provide guidance to the application team on application security best practices, support remediation effort and track open issues and follow up to ensure remediation. You will work along with cross functional business teams to get closure of identified gaps and utilize escalation matrix effectively wherever necessary. You will conduct application security assessment results review and mitigation approval. You will keep abreast of new technologies to ensure that the organization remains at the forefront of security.

Key Responsibilities

• Support and Testing: Vulnerability Assessments & Penetration Testing (Automated + Manual) on business critical assets with security tools like BurpSuite, Nessus, Nmap, Accunetix, Metasploit Netsparker, Qualys etc.
• Analysis: Perform in-depth analysis of VAPT results, Review assessment reports to provide risk mitigation & recommendations on that basis.
• Collaboration: Collaborate with the application team and provide them guidance on application security best practices, support remediation effort and track open issues and follow up to ensure remediation.

Qualifications & Skills

• Educational Qualification: Engineering Graduate in CS, IT, EC or InfoSec, CyberSec or MCA equivalent with relevant experience. Certification for OSCP is an additional advantage
• Compliance and Network Security: Knowledge of cyber security trends & hacking techniques, MITRE ATT&CK framework with hacker mindset. Knowledge of Network Security technology in areas of Firewall, IPS, VPN, Gateway security solutions (proxy, web filtering)
• Key Technologies: Familiarity with OWASP, SANS vulnerabilities along with its validations in source code and other security frameworks & Compliance, Knowledge of Networking concepts & Good understanding of latest Network /security technologies such as Cloud security and recent trends.

About the Business Group

ICICI Bank’s Information Security Group believes in providing services to its customers in the safest and secured manner, keeping in mind that data protection for its customers is as important as providing quality banking services across the spectrum. The CIA triad of Confidentiality, Integrity, and Availability is built on the vision of creating a comprehensive information security framework. The Bank also lays emphasis on customer elements like protection from phishing, adaptive authentication, awareness initiatives, and provide easy to use protection and risk configuration ability in the hands of customers. With this core responsibly, ICICI administer and promotes on going campaigns to create awareness among customers on security aspects while banking through digital channels.

Job Details

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Information Technology
• Industries: Banking