Application Security Specialist

AB Volvo; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Volvo Group Digital Technology & Operations in Bengaluru seeks an Application Security Specialist to elevate security maturity across Digital Product teams by translating governance into practical, usable guidance.

You will operationalize baselines, support Stable Teams with secure-by-design practices, and help evolve security maturity medals and KPIs through workshops and ongoing enablement.

Join a global, in-person team shaping sustainable transport and digital product delivery at Volvo Group.

Qualifications

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Ability to translate security requirements into practical guidance for product teams.
• Experience with application security governance, baselines, controls, or maturity models.
• Good understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Ability to advise engineering teams on secure-by-design practices.
• Strong communication skills, including workshops, training, playbooks, and written guidance.
• Ability to work with metrics, adoption tracking, maturity reporting, and continuous improvement.
• Risk-based mindset with the ability to prioritize based on business and product context.
• Strong stakeholder collaboration across product, engineering, DevSecOps, and security teams.
• Familiarity with frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST is preferred.

Responsibilities

• Translate governance expectations into practical guidance, patterns, playbooks, and team-facing materials.
• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Contribute to the development and continuous improvement of application security governance frameworks.
• Identify gaps in adoption and propose improvements to increase consistency, scalability, and usability.
• Provide clear and actionable guidance to Stable Teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support adoption of application security requirements.
• Act as a trusted advisor to teams, helping them interpret requirements and apply them appropriately in context.
• Promote secure-by-design thinking through education, consultation, and continuous engagement.
• Support the implementation and evolution of application security maturity levels and security maturity medals.
• Help Stable Teams understand their current maturity level and the steps needed to progress.
• Contribute to maturity assessments, improvement roadmaps, and structured enablement approaches.
• Support consistent adoption of maturity expectations across teams and Digital Product areas.
• Contribute to defining and tracking application security KPIs, adoption metrics, and maturity progression.
• Analyze trends in governance adoption, maturity improvement, and security control implementation.
• Provide insights to improve the effectiveness of application security governance capabilities.
• Support reporting on application security posture, adoption, and maturity evolution.
• Partner with Application Security Engineering and DevSecOps teams to align governance requirements with CI/CD, automation, and Golden Path capabilities.
• Promote security-by-default, automation, and scalable security practices.
• Help translate technical security capabilities into practical adoption guidance for Stable Teams.

Skills

Application security fundamentals

Secure SDLC

OWASP Top 10

DevSecOps

CI/CD

Secure-by-design

Workshop facilitation

Stakeholder collaboration

Threat modeling

Risk assessment

Job description

Select how often (in days) to receive an alert:

Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.

The Application Security Specialist helps improve application security maturity across Volvo Group by translating governance requirements into practical, usable guidance for Stable Teams.

The role supports the operationalization of application security baselines, tiered requirements, and security maturity medals. It focuses on enabling teams through clear guidance, education, adoption support, and continuous improvement, rather than enforcement alone.

Mission

Advance application security maturity across Digital Product teams by making security requirements clear, practical, and adoptable.

Support Stable Teams in understanding their application security obligations, improving their maturity level, and applying secure-by-design practices in the way they design, build, and operate Digital Products.

Key Accountabilities

Application Security Governance Enablement

• Operationalize application security baselines, tiered requirements, and maturity models across Stable Teams.
• Contribute to the development and continuous improvement of application security governance frameworks.
• Translate governance expectations into practical guidance, patterns, playbooks, and team-facing materials.
• Identify gaps in adoption and propose improvements to increase consistency, scalability, and usability.

Stable Team Enablement

• Provide clear and actionable guidance to Stable Teams on application security principles and secure design practices.
• Deliver workshops, training, and awareness activities to support adoption of application security requirements.
• Act as a trusted advisor to teams, helping them interpret requirements and apply them appropriately in context.
• Promote secure-by-design thinking through education, consultation, and continuous engagement.

Security Maturity Medals

• Support the implementation and evolution of application security maturity levels and security maturity medals.
• Help Stable Teams understand their current maturity level and the steps needed to progress.
• Contribute to maturity assessments, improvement roadmaps, and structured enablement approaches.
• Support consistent adoption of maturity expectations across teams and Digital Product areas.
• Contribute to defining and tracking application security KPIs, adoption metrics, and maturity progression.
• Analyze trends in governance adoption, maturity improvement, and security control implementation.
• Provide insights to improve the effectiveness of application security governance capabilities.
• Support reporting on application security posture, adoption, and maturity evolution.
• Partner with Application Security Engineering and DevSecOps teams to align governance requirements with CI/CD, automation, and Golden Path capabilities.
• Promote security-by-default, automation, and scalable security practices.
• Help translate technical security capabilities into practical adoption guidance for Stable Teams.

Expected Outcomes

• Stable Teams clearly understand application security requirements and how to apply them.
• Application security baselines and tiered requirements are consistently adopted.
• Security maturity medals are understood and used to drive measurable improvement.
• Application security governance capabilities are practical, scalable, and continuously improved.
• Metrics provide useful insight into adoption, maturity progression, and risk reduction.
• Security governance is translated into practical outcomes that support secure-by-design delivery.

Scope of Responsibility

The role contributes to the development, operationalization, and continuous improvement of application security governance capabilities. It works closely with Stable Teams, Digital Product Owners, Application Security Engineering, DevSecOps, and security governance stakeholders.

The role is responsible for enabling and supporting activities related to:

• Application Security Governance
• Tiered Security Requirements
• Secure Application Design Guidance
• Security Maturity Models and Medals
• Application Security Metrics and Reporting
• Security Enablement and Training

Required Skills

• 6+ years of experience in application security fundamentals, secure SDLC, and OWASP Top 10.
• Ability to translate security requirements into practical guidance for product teams.
• Experience with application security governance, baselines, controls, or maturity models.
• Good understanding of DevSecOps concepts, CI/CD, security automation, and developer workflows.
• Ability to advise engineering teams on secure-by-design practices.
• Strong communication skills, including workshops, training, playbooks, and written guidance.
• Ability to work with metrics, adoption tracking, maturity reporting, and continuous improvement.
• Risk-based mindset with the ability to prioritize based on business and product context.
• Strong stakeholder collaboration across product, engineering, DevSecOps, and security teams.
• Familiarity with frameworks such as OWASP SAMM, DSOMM, ISO 27001, or NIST is preferred.

At Volvo Group, we believe in the value of in-person collaboration and connection. Our general principle is that employees work from the office.

We value your data privacy and therefore do not accept applications via mail.

Who we are and what we believe in

We are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities.

Applying to this job offers you the opportunity to joinVolvo Group. Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation.We are passionate about what we do, and we thrive on teamwork.We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment.

Volvo Group Digital Technology & Operations (DTO)is a new division established to integrate the capabilities of VG Digital & IT and VG Connected Solutions to accelerate the digital transformation in Volvo Group. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience.

Joining the new DTO division means being part of a fast-moving digital product-oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross-functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.

Job Category: Information Technology

Organization: Volvo Group Digital Technology & Operations

Every day, Volvo Group products and services ensure that people have food on the table, children arrive safely at school and roads and buildings can be constructed. Looking ahead,we are committed to driving the transition to sustainable and safe transport, mobility and infrastructure solutions toward a net-zero society.

Joining Volvo Group, you will work with some of the world’s most iconic brands and be part of a global and leading industrial company that is harnessing automated driving, electromobility and connectivity.

Our people are passionate about what they do, they aim for high performance and thrive on teamwork and learning. Everyday life at Volvo is defined by a climate of support, care and mutual respect.

If you aspire to grow and make an impact, join us on our journey to create a better and more resilient society for the coming generations.