Job Description

Lead and mentor a team of application security engineers and penetration testers.
Guide team members daily project and operational activities
Manage and mature the application security program through direct interactions.
Actively seek to improve our application security and penetration testing operations.
Identify improvement opportunities in all processes and activities involved.
Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy.
Appropriately assess risk and provide software security advice when business decisions are made.
Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio.

Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques.
Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services.
Manage test resources to ensure maximum performance.
Ensuring secure outcomes of application and configuration testing.
Oversee vulnerability identification and measurement.
Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues.
Operate as an advocate for Security in interactions with internal and external teams.
Work with Risk & Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security
Lead projects to implement security technologies for the entire enterprise.
Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community.
Help the enterprise manage vulnerabilities across automated tooling and manual security assessments.
Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner.
Support the AppSec technical team and ensure relationships with Business and team maximised and effective.

Qualifications

Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development.
Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.
3-5 years supervisory experience preferred.
8-13 years direct experience in enterprise-level applications security.
Previous experience leading teams of penetration testers strongly encouraged and highly desired.
Experience with cloud-based application architectures

Additional Information

Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters DEI, work/life balance, development, authenticity, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why.

Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Experian Careers - Creating a better tomorrow together

Application Security Manager