Head of Application Security & DevSecOps

IncubXperts TechnoConsulting Pvt. Ltd.; Maharashtra; Remote; INR 4.500.000 - 7.500.000; Vollzeit

Zusammenfassung

IncubXperts TechnoConsulting Pvt. Ltd. seeks a seasoned Head of Application Security & DevSecOps to embed security into the software lifecycle. You will partner with Engineering to shift security left, integrating controls into CI/CD and production access requirements.

Ideal candidates have 7+ years in application security, DevSecOps or related fields, with cloud and API security expertise, and experience working with global teams on security initiatives.

Qualifikationen

• Strong background in application security, DevSecOps and cybersecurity.
• Hands-on experience with secure development lifecycles and threat modeling.
• Experience with security tooling across the software delivery pipeline.
• Familiarity with software supply-chain risk and open-source governance.
• Ability to translate security requirements into engineering solutions.

Aufgaben

• Own application and API security practices across products.
• Establish and mature the Secure SDLC and threat modeling processes.
• Implement and manage SAST, DAST, SCA and secrets scanning capabilities.
• Integrate security controls into CI/CD pipelines and deployments.
• Manage vulnerabilities, remediation and supply-chain risk.
• Collaborate with engineering teams in US and offshore locations.

Kenntnisse

Application security

DevSecOps

Threat modeling

Secure SDLC

Cloud architecture

CI/CD integration

Vulnerability management

Tools

SAST

DAST

SCA

Secrets scanning

CI/CD tooling

Jobbeschreibung

The Head of Application Security & DevSecOps is responsible for integrating security into the organization's software development and technology delivery processes. This role partners directly with Engineering to build security into the development lifecycle rather than relying primarily on post-development security reviews.

Key Responsibilities

• Own application and API security practices.
• Establish and mature the Secure SDLC.
• Conduct and facilitate threat modeling.
• Implement and manage SAST, DAST, SCA and secrets scanning capabilities.
• Integrate security controls into CI/CD pipelines.
• Manage application vulnerabilities and remediation.
• Address open-source, dependency and software supply-chain risk.
• Establish secure coding standards and developer security practices.
• Define security requirements for production access and deployments.
• Partner directly with U.S. and offshore Engineering teams.
• Improve developer security awareness and adoption.
• Automate application security testing and remediation workflows.
• Establish meaningful application security metrics and reporting.

Role Overview

The Head of Application Security & DevSecOps is responsible for integrating security into the organization's software development and technology delivery processes. This role partners directly with Engineering to build security into the development lifecycle rather than relying primarily on post-development security reviews.

Candidate Requirements

• 7+ years of application security, DevSecOps, software engineering or cybersecurity experience.
• Strong understanding of modern application, API and cloud architectures.
• Hands-on experience with CI/CD and application security tooling.
• Experience working directly with software engineering teams.
• Strong understanding of software supply-chain and dependency risk.
• Ability to translate security requirements into practical engineering solutions.
• Financial services, fintech or regulated-industry experience preferred.
• Remote- US Shift