Application Security SME - Threat Modeling & DevSecOps

Tata Consultancy Services; Taguig; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services is looking for an experienced Application Security professional in the Philippines to conduct VA/PT, threat modeling, and secure design reviews for web apps, APIs, cloud-native, and AI-enabled solutions.

You will execute DAST, remediation verification, and retesting, while integrating security controls into CI/CD pipelines. You will collaborate with cross-functional teams and stay current with threats and best practices in the field.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• Minimum five years in Application Security, Penetration Testing, or related roles.
• Hands-on with Web App and API security assessments.
• Strong knowledge of Threat Modeling and secure design reviews.
• Familiarity with OWASP Top 10 and secure coding practices.

Responsibilities

• Conduct VA/PT using industry methodologies and tools.
• Perform threat modeling and secure design reviews for apps, APIs, cloud-native, and AI-enabled solutions.
• Execute DAST and remediation verification, including retesting.
• Support DevSecOps by integrating security controls into CI/CD pipelines.
• Assess architectures, cloud services, integrations, and emerging tech.
• Develop risk-based remediation recommendations and improvement plans.
• Prepare assessment reports, risk assessments, and executive summaries.
• Present findings to stakeholders and technical teams.
• Collaborate with development, architecture, and infrastructure teams to strengthen security posture.
• Provide SME in application security, secure coding, AI security, and vulnerability management.
• Maintain and improve security policies, standards, and testing methodologies across SDLC/DevSecOps.
• Stay current with threats and industry best practices.

Skills

App security

Penetration testing

Threat modeling

Secure SDLC

DevSecOps

Security reporting

Education

Bachelor's in CS/IT/Cybersecurity

Cybersecurity-related field

Tools

Burp Suite

Qualys

Nessus

Nmap

Metasploit

Kali Linux

Job description

Tata Consultancy Services is looking for an experienced Application Security professional in the Philippines to conduct VA/PT, threat modeling, and secure design reviews for web apps, APIs, cloud-native, and AI-enabled solutions.

You will execute DAST, remediation verification, and retesting, while integrating security controls into CI/CD pipelines. You will collaborate with cross-functional teams and stay current with threats and best practices in the field.