Application Security - Web/Mobile API - Assistant Manager

Embark; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Embark is seeking an experienced Application Security professional to lead AppSec reviews and risk remediation for our production environment in Mumbai. You will appraise security across web and mobile apps, run annual and change-driven assessments, and produce closure reports with concrete recommendations.

Responsibilities include maintaining SCR and Appsec tools, managing user lifecycles, and coordinating with engineering and OPS teams to ensure timely remediation and OEM follow-up when needed.

Qualifications

• Application security experience across web and mobile apps.
• Experience with production environment security assessments.
• Ability to generate closure reports with findings and recommendations.
• Familiarity with OWASP Top 10 and NIST security standards.
• Experience creating MIS dashboards and senior management reporting.

Responsibilities

• Source Code Review (SCR). Annually and Adhoc as per requirement.
• Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.
• Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).
• Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.
• Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure oem is met

Skills

AppSec

Production security

Vulnerability remediation

OWASP Top 10

NIST standards

MIS & dashboarding

Education

Master's or Bachelor's in Cybersecurity/IT

Tools

SCR tool

Appsec tools

Job description

Responsibilities

• Source Code Review (SCR). Annually and Adhoc as per requirement.


• Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.


• Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).


• Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.


• Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure oem is met

Requirements

• Source Code Review (SCR). Annually and Adhoc as per requirement.


• Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.


• Application Security (Web/Mobile). Conduct application security (Appsec) assessment for all in-scope internal and external web, android and iOS applications once annually or when the change in modules/UI has been made (whichever applicable first).


• Maintenance and management Appsec tools and manage the user creation/deletion/dormant user removal.


• Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure oem is met

Key Skills

• 4-7 years of experience.


• Conduct Appsec on Production Environment.


• Provide external closure report (in PDF) with findings, impact, recommendations and POC’s.


• Assist & Support team for closing the vulnerability (if any)


• External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.


• Assessment should be performed based on security standards such as OWASP Top 10, NIST.


• Detailed Management level MIS and Dashboard creation to be captured on fortnight basis.


• Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.

Location

• Location: Mumbai