Leads application and API security by embedding security into the software development lifecycle. Owns threat modeling, secure coding standards, CI/CD security controls, vulnerability remediation, software supply-chain risk management, security tooling, developer awareness, automation, and application security metrics. Partners with U.S. and offshore engineering teams to translate security requirements into practical solutions.
Role Overview
The Head of
Application Security & DevSecOps is responsible for integrating security
into the organization's software development and technology delivery processes. This role
partners directly with Engineering to build security into the development
lifecycle rather than relying primarily on post-development security reviews.
Key
Responsibilities
- Own application and API security
practices.
- Establish and mature the Secure
SDLC.
- Conduct and facilitate threat
modeling.
- Implement and manage SAST, DAST,
SCA and secrets scanning capabilities.
- Integrate security controls into
CI/CD pipelines.
- Manage application vulnerabilities
and remediation.
- Address open-source, dependency
and software supply-chain risk.
- Establish secure coding standards
and developer security practices.
- Define security requirements for
production access and deployments.
- Partner directly with U.S. and
offshore Engineering teams.
- Improve developer security
awareness and adoption.
- Automate application security
testing and remediation workflows.
- Establish meaningful application
security metrics and reporting.
Requirements
Candidate
Requirements
- 7+ years of application security,
DevSecOps, software engineering or cybersecurity experience.
- Strong understanding of modern
application, API and cloud architectures.
- Hands-on experience with CI/CD and
application security tooling.
- Experience working directly with
software engineering teams.
- Strong understanding of software
supply-chain and dependency risk.
- Ability to translate security
requirements into practical engineering solutions.
- Financial services, fintech or
regulated-industry experience preferred.
- Remote- US Shift
IncubXperts TechnoConsulting Pune, Mahārāshtra, IND Office
Pune, India
Similar Jobs
Fintech • Legal Tech • Software • Financial Services • Cybersecurity • Data Privacy
Manages private equity fund accounting, including fund structures, investor commitments, capital activity, transaction booking, NAV workbooks, allocations, fees, carried interest, performance metrics, and investor reporting. Supervises team members, ensures operational accuracy and controls, resolves accounting issues, and coordinates with clients, banks, brokers, and global counterparts. The role also requires knowledge of debt instruments, waterfalls, and fund-level reporting.
Top Skills:
Ilpa ReportingExcel
Cloud • Information Technology • Security • Software • Cybersecurity
Provides technical leadership throughout enterprise security sales, advising customers on digital transformation and cloud security solutions. Owns technical sales processes, qualifies opportunities, develops trusted customer relationships, and delivers sales presentations, technical demonstrations, and whiteboards. Requires extensive Sales Engineering or systems integration experience, networking and security expertise, and familiarity with AI/ML, enterprise cloud security, identity protocols, web security, and major operating systems.
Top Skills:
Active DirectoryAi/MlCloud SecurityFirewallsGpoHTTPLdapmacOSNetwork SecurityRoutersSAMLSaseSsoSwitchesUnix/LinuxWeb ProxiesWindowsZscaler Zero Trust Exchange
Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
Provides advanced technical support for customer cloud and telecom environments, resolving incidents, analyzing logs, troubleshooting networking and storage systems, managing software updates, and meeting SLA requirements. The role coordinates critical issues, preventive actions, root-cause analysis, knowledge sharing, operational reviews, project handovers, and customer communications. It also supports pre-sales activities, identifies sales opportunities, and requires expertise in OpenStack, Kubernetes, Red Hat platforms, Ceph, cloud networking, and telecom cloud applications.
Top Skills:
3GppAmfBfdBgpCcdmCcpcCcrcCcsmCephCloud NetworkingCloud StorageEpgImsIp RoutingKubernetesMmeOpenstackOspfPccRed Hat OpenshiftRed Hat Openstack PlatformSapcSdiSdnSmf
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
