Application Security Lead

Position – Application Security Lead

Location - Gurgaon ( HYBRID WORK MODE )

Technical Skills :

Required Qualifications:

- Bachelor's degree in Computer Science, Information Security, or related field.

- Minimum of 8 years of experience in performing vulnerability assessments and penetration testing.

- Hands-on experience with industry-leading security assessment tools such as Burp Suite, Nessus, Metasploit, and OWASP ZAP.

- Proficiency in conducting Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) using tools like Checkmarx, Fortify, or Veracode.

- Strong understanding of common web application vulnerabilities (e.g., SQL injection, XSS, CSRF) and mobile application security principles.

- Experience in testing mobile applications on both Android and iOS platforms, including knowledge of platform-specific security controls and vulnerabilities.

- Excellent analytical and problem-solving skills with the ability to prioritize and manage multiple tasks in a fast-paced environment.

- Effective communication skills with the ability to convey technical information to non-technical stakeholders.

- Relevant industry certifications such as CEH, OSCP, or CISSP are preferred.

Preferred Qualifications:

Experience in conducting Red Team exercises and simulated attacks.

Knowledge of cloud security principles and experience with cloud service providers such as AWS, Azure, or GCP.

Familiarity with DevSecOps practices and integrating security into the software development lifecycle (SDLC).

- Understanding of regulatory compliance requirements (e.g., GDPR, HIPAA, PCI DSS) and their implications for security assessments.