Director - Devsecops

Mobileum; Bengaluru; On-site; INR 6,000,000 - 12,000,000; Full time

Job summary

Mobileum is seeking a Security Director to establish and lead our enterprise security function. This is a unique opportunity to build a security organization from the ground up, define strategy, and drive cultural transformation across engineering.

You will own all aspects of product security, DevSecOps, compliance and risk management, and you will build and lead a security team while partnering with 10+ product engineering teams to drive secure software delivery.

Qualifications

• 15+ years in information security with 5+ years in leadership roles.
• Proven track record building security teams in software/SaaS organizations.
• Deep expertise in application security, DevSecOps, and secure SDLC.
• Understanding of software architecture, microservices, and API security.
• Experience with ISO27001, SOC2, NIST CSF, and regulatory frameworks.

Responsibilities

• Define and execute the security vision, strategy, and multi-year roadmap.
• Build and mentor a high-performing central security team.
• Own ISO27001 ISMS implementation and drive certification readiness.
• Lead DevSecOps transformation with shift-left security practices.
• Oversee vulnerability management, incident response, and penetration testing.

Skills

Information security leadership

DevSecOps

Application security

Cloud security

Kubernetes security

Security tooling

Auditing & compliance

Threat modeling

AI/ML security considerations

Education

BE / B.Tech. / ME / M.Tech / MSc in Computer Science

Tools

Splunk

ELK

SAST

DAST

SCA

IAST

Kubernetes

Job description

Mobileum is a leading provider of Telecom analytics solutions for roaming, core network, security, risk management, domestic and international connectivity testing, and customer intelligence. More than 1,000 customers rely on its Active Intelligence platform, which provides advanced analytics solutions, allowing customers to connect deep network and operational intelligence with real-time actions that increase revenue, improve customer experience, and reduce costs.

Know our story: https://www.mobileum.com/

Headquartered in Silicon Valley, Mobileum has global offices in Australia, Dubai, Germany, Greece, India, Portugal, Singapore and UK with global HC of over 1800+.

Join Mobileum Team

At Mobileum we recognize that our team is the main reason for our success. What does work with us mean? Opportunities!

Position: Director – DevSecOps.

About the Role

We are seeking a Security Director to establish and lead our enterprise security function. This is a unique opportunity to build a security organization from the ground up, define strategy, and drive cultural transformation across engineering.

You will own all aspects of product security, DevSecOps, compliance, and risk management. You will build and lead a team of security professionals while partnering closely with 10+ product engineering teams.

• Define and execute the security vision, strategy, and multi-year roadmap
• Build and mentor a high-performing central security team
• Own ISO27001 ISMS implementation and drive certification readiness
• Drive DevSecOps transformation with shift-left security practices
• Lead containerization security strategy across business units
• Own Kubernetes security (Pod Security Standards, network policies, admission controllers)
• Establish SIEM implementation, security monitoring, and logging standards
• Define secure configuration baselines for infrastructure, cloud, and K8s environments
• Implement and scale a Security Champions program across product teams
• Lead selection and deployment of security tooling (SAST, DAST, SCA, IAST)
• Serve as primary technical point of contact for internal and external auditors
• Represent security at executive leadership and board level
• Oversee vulnerability management, incident response, and penetration testing

Desired Profile: -

• 15+ years in information security with 5+ years in leadership roles
• Proven track record building security teams in software/SaaS organizations
• Deep expertise in application security, DevSecOps, and secure SDLC
• Deep understanding of software architecture, microservices, and API security
• Knowledge of database security (SQL, NoSQL) and data protection techniques
• Deep experience with Kubernetes security (Pod Security Standards, admission controllers, network policies, RBAC)
• Proficiency in cloud security (AWS, Azure, or GCP) and infrastructure-as-code
• Experience implementing SIEM solutions (Splunk, ELK) and security monitoring
• Understanding of AI/ML security considerations
• Familiarity with cryptography, authentication protocols (OAuth, SAML, JWT), and IAM

Security Expertise

• Expert knowledge of OWASP Top 10, CWE/SANS Top 25, and common vulnerability classes
• Experience with security tools (SAST, DAST, SCA) and threat modeling methodologies
• Deep understanding of secure coding practices and code review techniques

Compliance

• Hands-on experience with ISO27001 implementation and certification
• Familiarity with SOC2, NIST CSF, and regulatory frameworks (GDPR, DPDP)

Preferred Qualifications

• CISSP, CISM, CSSLP, or equivalent certifications
• Experience in B2B enterprise software or SaaS product companies
• Track record of successful ISO27001 or SOC2 certifications
• Experience managing geographically distributed teams
• Background in regulated industries with strict compliance requirements
• Knowledge of emerging areas: AI/ML security, supply chain security, zero trust architecture

Work Experience:

15+ years

Educational Qualification:

BE. / B.Tech., M.E./M. Tech. or M. Sc. in Computer Science or any related qualification.