Manager- Application Security

Overview

Manager- Application Security will provide technical leadership and hands-on application security work while managing the AppSec domain and team.

What you'll do

• Spend ~60% of time on application security testing, vulnerability assessments, penetration testing, code reviews, and automation.
• Spend ~40% of time managing AppSec strategy, roadmap, and measurable KPIs and coordinating with stakeholders.
• Lead the Application Security program across products, platforms, and engineering teams.
• Run hands-on SAST, DAST, manual code reviews, penetration testing, and vulnerability validation for web, mobile (Android and iOS), APIs, and cloud.
• Perform security assessments for AI/ML and GenAI systems including LLM applications, model endpoints, RAG pipelines, and agentic workflows.
• Drive remediation governance by triaging, tracking, and reporting vulnerabilities with SLAs and accountability.
• Conduct security architecture and design reviews and define secure coding and threat modeling/hardening standards.

What you'll need

• 10 to 14 years of experience.
• Proven leadership experience in application security, DevSecOps, or software security engineering while staying hands-on.
• Deep hands-on understanding of SAST, DAST, and secure SDLC integration.
• Working knowledge of AI/ML and LLM security, threat modeling, and testing against OWASP Top 10 for LLM Applications, OWASP ML Security Top 10, and MITRE ATLAS.
• Skills to manage AppSec tooling such as Checkmarx, Burp Suite Enterprise, OWASP ZAP, MobSF, and open-source frameworks.
• Familiarity with CI/CD automation, scripting (Python, Bash, PowerShell), and container security (Docker/Kubernetes).
• Certifications such as OSCP, GWAPT, GPEN, or equivalent are preferred.

Details

• Location: Bengaluru.