Senior Application Security Manager

Adani Enterprises Limited; Ahmedabad District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Adani Enterprises Limited is seeking a strategic leader to drive the group’s application security vision and embed security across the SDLC. The role focuses on secure design, DevSecOps integration, vulnerability management, and resilience against cyber threats.

You will collaborate with engineering, digital and product teams to establish scalable security frameworks, promote secure coding, and enable proactive risk-based security across scale and complexity.

Qualifications

• 15 years of experience in cybersecurity with strong application security expertise.
• Proven track record in application security baselining (SAST/DAST) and DevSecOps.
• Experience implementing security controls to protect digital assets.

Responsibilities

• Develop and lead the implementation of an application security strategy aligned with organizational goals.
• Provide strategic direction for policy, procedures, and information risk management.
• Identify and mitigate security risks in applications using industry best practices.
• Lead a team of application security professionals and mentor staff.
• Collaborate with development, IT operations, and business units to embed security in the SDLC.
• Oversee implementation and maintenance of testing tools and processes (SAST, DAST, CAST, VAPT).
• Drive continuous improvement of security controls and processes.
• Stay updated on threats and trends to inform security strategy.
• Advise executive leadership on application security matters.

Skills

Security leadership

App security

DevSecOps

SAST/DAST

VAPT

Threat modeling

SDLC security

Education

Bachelor's in CS/IT

Master's in Cybersecurity

Tools

SAST tools

DAST tools

CAST tooling

Job description

This is a strategic leadership position responsible for driving the Group’s application security vision and embedding security across the software development lifecycle (SDLC). The role will focus on strengthening secure design practices, DevSecOps integration, vulnerability management, and ensuring that applications across the enterprise are resilient against evolving cyber threats.

The incumbent will work closely with engineering, digital, and product teams to establish scalable security frameworks, promote secure coding practices, and enable a proactive, risk-based approach to application security.

Qualifications

• Preside over monthly meetings with the GCISO,GCIO, BU CIOs and COEs with the agenda to improve posture of the organization, enhance IT security performance, promote collaboration & community building.
• This Position reports into the GCISO

Education Qualification

• Bachelor's degree in Computer Science, Information Technology, or related field
• Master's degree in Cybersecurity or relevant field (preferred)

Certification Required (preferred)

• Certified Information Systems Security Professional (CISSP)
• Offensive Security Certified Professional (OSCP)
• Certified Ethical Hacker (CEH)
• Any other relevant cybersecurity certifications

Experience

• 15 years of experience in the cybersecurity industry with strong experience in application security.
• Demonstrated expertise in application security baselining assessment (SAST/DAST) and DevSecOps.
• Proven track record of implementing security controls to protect digital assets.

Roles And Responsibilities

• Develop and lead the implementation of an application security strategy aligned with the organization's overall security objectives and business goals.
• Provide strategic direction and oversight for all aspects of application security, including policy & procedure development and information risk management.
• Establish and maintain a proactive approach to identifying and mitigating security risks in our applications, leveraging industry best practices and standards.
• Lead a team of application security professionals and providing mentorship.
• Collaborate with cross-functional teams, including development, IT operations, and business units, to integrate security into the software development lifecycle (SDLC).
• Oversee the implementation and maintenance of application security testing tools and processes, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Cloud Application Security (CAST) and Vulnerability Assessment and Penetration Testing (VAPT).
• Drive continuous improvement initiatives to enhance the efficiency and effectiveness of application security controls and processes.
• Stay abreast of emerging threats, vulnerabilities, and industry trends in application security, and incorporate relevant insights into the organization's security strategy.
• Serve as a subject matter expert on application security, providing guidance and recommendations to executive leadership and other stakeholders.