Application Security - Web/Mobile API - Assistant Manager

EMBARK SERVICES PRIVATE LIMITED; Mumbai; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

EMBARK SERVICES PRIVATE LIMITED in Mumbai is seeking an Assistant Manager for Application Security focusing on Web and Mobile API, with annual and adhoc security reviews.

You will conduct production AppSec assessments, prepare external closure reports, and drive remediation with OWASP Top 10 and NIST guidelines, while coordinating quarterly assessments and fortnightly MIS dashboards.

Qualifications

• 4–7 years of experience in application security.
• Conduct AppSec on Production Environment.
• Provide external closure reports (PDF) with findings, impact, recommendations and POC’s.
• Assist & Support team for closing the vulnerability.
• External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.
• Assessment should be performed based on security standards such as OWASP Top 10, NIST.
• Detailed MIS and Dashboard creation to be captured on fortnight basis.

Responsibilities

• Source Code Review (SCR) annually and adhoc as per requirement.
• Maintenance and management SCR tool and manage user lifecycle (creation/deletion/dormant removal).
• Appsec assessment for all in-scope internal/external web, Android, iOS apps annually or when modules/UI change.
• Maintain SCR tool and manage user lifecycle.
• Follow up with OEM for hardware/firmware issues and tickets.

Skills

Application security

MIS dashboards

Web/Mobile API security

Education

Master’s or Bachelor’s degree in Cybersecurity/Information Technology

Tools

SCR tool

AppSec tools

Job description

EMBARK SERVICES PRIVATE LIMITED | Full time

Application Security - Web/Mobile API - Assistant Manager

• Source Code Review (SCR). Annually and Adhoc as per requirement.
• Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.
• Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).
• Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.
• Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure oem is met

Requirements

• 4-7 years of experience.
• Conduct Appsec on Production Environment.
• Provide external closure report (in PDF) with findings, impact, recommendations and POC’s.
• Assist & Support team for closing the vulnerability (if any)
• External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.
• Assessment should be performed based on security standards such as OWASP Top 10, NIST.
• Detailed Management level MIS and Dashboard creation to be captured on fortnight basis.
• Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.