Appsec Specialist - Lead

Strategic Roles and Responsibilities

• Conduct regular security assessments of applications to identify and prioritize vulnerabilities.
• Perform penetration testing on web and mobile applications to simulate real-world cyber-attacks and uncover potential weaknesses.
• Review application code to identify and remediate security flaws, ensuring adherence to secure coding practices.
• Evaluate the overall security architecture of applications and propose improvements to enhance resilience against cyber threats.
• Automate repetitive security tasks to improve efficiency and coverage.
• Work closely with cross-functional teams including developers, QA, DevOps, and IT.
• Strong coding and scripting skills (e.g., Python, Java, JavaScript, TypeScript, etc.); ability to prototype tools or support initiatives directly.
• Hands on experience on IaC -Infrastructure as Code.
• Integrate security testing into CI/CD pipelines (DevSecOps).
• Monitor and respond to security incidents, conducting root cause analysis and implementing corrective actions.
• Stay up to date with the latest security trends, threats, and technologies to continuously improve the security posture of applications.
• Build automation scripts to reduce the repetitive task such as reports, attacking scripts, etc

People Management

• Provide mentorship and guidance to junior team members.
• Conduct performance reviews and provide constructive feedback.
• Ensure continuous professional development of team members.
• Foster an environment of learning, excellence, and innovation within the team and across teams.

Educational qualifications & Experience

• Bachelor’s degree in computer science, Information Security, or related field.
• 8-12 years of experience in application security, including vulnerability assessment and penetration testing.
• Strong understanding of secure coding practices and knowledge of common security vulnerabilities.
• Familiarity with security standards and frameworks such as OWASP, ISO 27001, and NIST .
• Experience with security testing tools and automation.
• Relevant certifications such as CEH, AZ500, AWS Security, Kubernetes, IaC are a plus.
• Excellent communication and collaboration skills.

Ability to stay up-to-date with the latest security trends, threats, and technologies