Job Description

Lead and mentor a team of application security engineers and penetration testers.
Guide team members daily project and operational activities
Manage and mature the application security program through direct interactions.
Actively seek to improve our application security and penetration testing operations.
Identify improvement opportunities in all processes and activities involved.
Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy.
Appropriately assess risk and provide software security advice when business decisions are made.
Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio.
Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques.
Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services.
Manage test resources to ensure maximum performance.
Ensuring secure outcomes of application and configuration testing.
Oversee vulnerability identification and measurement.
Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues.
Operate as an advocate for Security in interactions with internal and external teams.
Work with Risk & Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security
Lead projects to implement security technologies for the entire enterprise.
Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community.
Help the enterprise manage vulnerabilities across automated tooling and manual security assessments.
Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner.
Support the AppSec technical team and ensure relationships with Business and team maximised.

Qualifications

Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development.
Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification.
3+ years of experience.
8+ years of experience in enterprise-level applications security.
Previous experience leading teams of penetration testers strongly encouraged
Experience with cloud-based application architectures

Additional Information

Our uniqueness is that we celebrate yours. Experian's people first, inclusive and purpose driven culture is multi award-winning World's Best Workplaces™ 2025 (Fortune Global Top 25), Great Place To Work™ in 26 countries to name a few. Check out Experian Life on social or explore our Careers Site to understand why. Experian is also proud to be an Equal Opportunity and Affirmative Action employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Recruitment Fraud Awareness- Experian's recruitment process is conducted only through authorised channels. Recruitment communications will only be sent from an @experian.com email address. Experian will never ask candidates to make any payment as part of an application, interview, assessment, onboarding, or recruitment process. To apply for roles or verify opportunities, please visit experian.com/careers.

Experian Careers - Creating a better tomorrow together

Application Security Manager