Job Title: Cybersecurity Lead Application Security / DevSecOps

Experience: 5+ Years (Relevant Experience)

Location: Bangalore (Bagmane Solarium)

Work Mode: Hybrid (3 Days Mandatory Work From Office)

Job Summary:

We are seeking an experienced Cybersecurity Lead to drive application security initiatives across enterprise-grade desktop, web, and mobile applications. The ideal candidate will be responsible for implementing secure software development practices, conducting application security assessments, managing vulnerability remediation, and collaborating with cross-functional teams to ensure cybersecurity is embedded throughout the Software Development Life Cycle (SDLC).

This role requires strong expertise in DevSecOps, secure coding practices, vulnerability management, application security testing, cloud security, and security governance. The candidate will work closely with development teams, architects, infrastructure teams, and cybersecurity stakeholders to identify security risks, enforce compliance, and strengthen the organization's overall security posture.

Key Responsibilities:

Application Security & DevSecOps:

- Lead cybersecurity initiatives across desktop (.NET/C#), web, and mobile applications.

- Act as the primary cybersecurity advisor for development and delivery teams.

- Integrate security into every phase of the Software Development Life Cycle (SDLC).

- Ensure security requirements are incorporated during application design, development, testing, deployment, and maintenance.

- Promote secure development practices and educate engineering teams on application security principles.

Secure Development Lifecycle (SDL):

- Drive and enforce secure development processes including:

1. Cyber Risk Assessment (CRA)

2. Functional Cyber Security Compliance Review (FCSR)

3. SDLv2

4. Internal Digital Security Certification

- Ensure all cybersecurity documentation is complete, compliant, and audit-ready.

- Monitor security governance activities across multiple projects.

- Participate in architecture and design reviews to identify security risks early.

Vulnerability Management:

- Perform Static Application Security Testing (SAST), Software Composition Analysis (SCA), and dependency scanning.

- Analyze security findings and classify vulnerabilities based on severity and business impact.

- Create actionable remediation plans and convert findings into Jira user stories/tasks.

- Track remediation activities until successful closure.

- Ensure applications use the latest secure versions of third-party libraries and components.

- Coordinate with vendors and internal teams for component upgrades and security patches.

Security Tool Management:

- Work extensively with security tools including:

1. SonarQube

2. Coverity

3. Cycode

4. BDBA (Black Duck Binary Analysis)

5. Dependency scanning solutions

6. Vulnerability management platforms