Head Of Application Security & Devsecops

IncubXperts TechnoConsulting; Maharashtra; Remote; INR 3,000,000 - 6,000,000; Full time

Job summary

IncubXperts TechnoConsulting is seeking the Head of Application Security & DevSecOps to embed security into software delivery. You will partner with Engineering to integrate security across the development lifecycle and production deployments.

Lead secure coding standards, threat modeling, and the Secure SDLC; implement SAST/DAST/SCA and secrets scanning, and ensure security controls are integrated into CI/CD pipelines while coordinating with US and offshore teams on a remote US shift.

Qualifications

• 7+ years of application security, DevSecOps, software engineering or cybersecurity experience.
• Strong understanding of modern application, API and cloud architectures.
• Hands-on experience with CI/CD and security tooling.
• Experience collaborating with software engineering teams.

Responsibilities

• Own application and API security practices.
• Establish and mature the Secure SDLC.
• Conduct and facilitate threat modeling.
• Implement and manage SAST, DAST, SCA and secrets scanning capabilities.
• Integrate security controls into CI/CD pipelines.
• Manage application vulnerabilities and remediation.
• Address open-source, dependency and software supply-chain risk.
• Establish secure coding standards and developer security practices.
• Define security requirements for production access and deployments.
• Partner directly with U.S. and offshore Engineering teams.
• Improve developer security awareness and adoption.
• Automate application security testing and remediation workflows.
• Establish meaningful application security metrics and reporting.

Skills

Application security

DevSecOps

Threat modeling

CI/CD tooling

Secure SDLC

Tools

SAST

DAST

SCA

Secrets scanning

Job description

Job Information

• Date Opened 10/01/2026
• Industry IT Services
• Job Type Full time
• Work Experience 6-10 years
• City Pune City
• State/Province Maharashtra
• Country India
• Zip/Postal Code 411001

About Us

IncubXperts is a Software Technology Services company. We focus on building Web solutions for Enterprises and Independent Software Vendors or Product companies.

To know more visit: www.incubxperts.com

Job Description

Role Overview

The Head of Application Security & DevSecOps is responsible for integrating security into the organization's software development and technology delivery processes. This role partners directly with Engineering to build security into the development lifecycle rather than relying primarily on post-development security reviews.

Key Responsibilities

• Own application and API security practices.
  
• Establish and mature the Secure SDLC.
  
• Conduct and facilitate threat modeling.
  
• Implement and manage SAST, DAST, SCA and secrets scanning capabilities.
  
• Integrate security controls into CI/CD pipelines.
  
• Manage application vulnerabilities and remediation.
  
• Address open-source, dependency and software supply-chain risk.
  
• Establish secure coding standards and developer security practices.
  
• Define security requirements for production access and deployments.
  
• Partner directly with U.S. and offshore Engineering teams.
  
• Improve developer security awareness and adoption.
  
• Automate application security testing and remediation workflows.
  
• Establish meaningful application security metrics and reporting.

Requirements

Candidate Requirements

• 7+ years of application security, DevSecOps, software engineering or cybersecurity experience.
  
• Strong understanding of modern application, API and cloud architectures.
  
• Hands-on experience with CI/CD and application security tooling.
  
• Experience working directly with software engineering teams.
  
• Strong understanding of software supply-chain and dependency risk.
  
• Ability to translate security requirements into practical engineering solutions.
  
• Financial services, fintech or regulated-industry experience preferred.
  
• Remote- US Shift