Experience: 5.00 + years
Salary: INR 5000000-6000000 / year (based on experience)
Expected Notice Period: 30 Days
Shift: (GMT+05:30) Asia/Kolkata (IST)
Opportunity Type: Office ()
Placement Type: Full Time Permanent position(Payroll and Compliance to be managed by: Xurrent)
(*Note: This is a requirement for one of Uplers client - Xurrent)
What do you need for this opportunity
Must have skills required:
Good communication skills, GDPR, ISO 27001, SOC2, product security, SaaS
Xurrent is Looking for:
The
Lead, Application and Product Security Manager will lead the application security program to ensure the integrity, confidentiality, and availability of the Xurrent company and customer data. Responsibilities include identifying, documenting, assessing, prioritizing, sizing, and mitigating application security risks. The role requires expertise in proactive risk management and rapid response to security threats to uphold customer trust and compliance with regulatory standards.
Responsibilities:
- Take full ownership of incident response process including annual tabletop exercises
- Lead the vulnerability management process including implementation of detection tools, leading the triage process, and providing guidance to internal teams on remediation of detected vulnerabilities
- Lead the company's business continuity and disaster recovery efforts
- Gather technical evidence for annual information security audits
- Monitoring of security and data protection inboxes and ownership of responsible disclosure program
- Risk assessment development and communication to stakeholders
- Third party (vendor) risk management program development and ownership
- Ownership of technical security policies
- Ownership of security awareness training and internal phishing simulation campaigns
- Coordinate with audit firms, consultants, and development teams to provide the information required to complete security review and audits in a timely manner.
- Stay informed about emerging threats and vulnerabilities.
- Define and implement the long-term vision, strategy, and roadmap for product and application security aligned with company objectives.
- Integrate security into the Software Development Life Cycle (SDLC) and DevSecOps pipelines.
- Communicate security risks and recommendations to executive leadership.
Requirements:
- In-depth knowledge of secure coding practices, application architectures, and cloud security, particularly in a SaaS environment.
- Strong background in software development and security.
- Familiarity with compliance requirements relevant to SaaS platforms (for example, ISO 27001, GDPR, SOC2).
- Excellent communication and interpersonal skills.
- Bachelor's degree in Computer Science, Information Security, or related field. Advanced degrees or certifications in cybersecurity (for example, CISSP, CISM) preferred.
Interview Process:
- Intro call with HR
- Discussion with CTO (Tech + Culture)
- Technical Discussion 1
- Technical Discussion 1
How to apply for this opportunity
- Step 1: Click On Apply! And Register or Login on our portal.
- Step 2: Complete the Screening Form & Upload updated Resume
- Step 3: Increase your chances to get shortlisted & meet the client for the Interview!
About Uplers:
Our goal is to make hiring reliable, simple, and fast. Our role will be to help all our talents find and apply for relevant contractual onsite opportunities and progress in their career. We will support any grievances or challenges you may face during the engagement.
(Note: There are many more opportunities apart from this on the portal. Depending on the assessments you clear, you can apply for them as well).
So, if you are ready for a new challenge, a great work environment, and an opportunity to take your career to the next level, don't hesitate to apply today. We are waiting for you!
