Leads application and API security by embedding security into the software development lifecycle. Owns threat modeling, secure coding standards, CI/CD security controls, vulnerability remediation, software supply-chain risk management, security tooling, developer awareness, automation, and application security metrics. Partners with U.S. and offshore engineering teams to translate security requirements into practical solutions.
Role Overview
The Head of
Application Security & DevSecOps is responsible for integrating security
into the organization's software development and technology delivery processes. This role
partners directly with Engineering to build security into the development
lifecycle rather than relying primarily on post-development security reviews.
Key
Responsibilities
- Own application and API security
practices.
- Establish and mature the Secure
SDLC.
- Conduct and facilitate threat
modeling.
- Implement and manage SAST, DAST,
SCA and secrets scanning capabilities.
- Integrate security controls into
CI/CD pipelines.
- Manage application vulnerabilities
and remediation.
- Address open-source, dependency
and software supply-chain risk.
- Establish secure coding standards
and developer security practices.
- Define security requirements for
production access and deployments.
- Partner directly with U.S. and
offshore Engineering teams.
- Improve developer security
awareness and adoption.
- Automate application security
testing and remediation workflows.
- Establish meaningful application
security metrics and reporting.
Requirements
Candidate
Requirements
- 7+ years of application security,
DevSecOps, software engineering or cybersecurity experience.
- Strong understanding of modern
application, API and cloud architectures.
- Hands-on experience with CI/CD and
application security tooling.
- Experience working directly with
software engineering teams.
- Strong understanding of software
supply-chain and dependency risk.
- Ability to translate security
requirements into practical engineering solutions.
- Financial services, fintech or
regulated-industry experience preferred.
- Remote- US Shift
IncubXperts TechnoConsulting Pune, Mahārāshtra, IND Office
Pune, India
Similar Jobs
Consumer Web • HR Tech
Design, build, and operate production-grade autonomous AI systems and multi-agent workflows. Develop agentic capabilities using OpenAI, Google Gemini, and Perplexity; implement orchestration, reflection, planning, evaluation, observability, and human-in-the-loop controls. Deploy scalable serverless services with Python and AWS, integrate with .NET systems, manage reliability and cost constraints, and create testing frameworks to monitor and improve agent quality.
Top Skills:
.NetAmazon EventbridgeAws LambdaAws Step FunctionsC#Claude CodeCursorGoogle GeminiOpenaiPerplexityPython
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead design and build cloud-native batch and real-time data platforms. Develop scalable ETL/ELT and streaming pipelines (Spark, Kafka, Flink), ensure data quality, governance, observability, security, cost optimization, and drive platform engineering excellence and team mentorship.
Top Skills:
AdlsAirflowApache FlinkApache Spark (CoreArm TemplatesAvroAWSAzureBigQueryCloudFormationDatabricksDockerDynatraceEmrGatlingGCPGcsGdprGithub ActionsGoIamJava (Jdk 8+)JenkinsJmeterJunitKafkaKubernetesOrcParquetPci DssPrometheusPythonRedshiftS3SnowflakeSpark StreamingSplunkSQLSQLStructured Streaming)Terraform
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Owns platform product vision, roadmap, feature prioritization, requirements, releases, metrics, operational health, and customer-impacting issues. Partners with engineering, UX, technical program managers, business stakeholders, vendors, and customer service. Drives platform launches, documentation, PCI audits, vulnerability and technical-debt tracking, performance analysis, and continuous improvements while mentoring team members.
Top Skills:
AgileCloud-Ready MicroservicesJavaPci DssSQL
What you need to know about the Pune Tech Scene
Once a far-out concept, AI is now a tangible force reshaping industries and economies worldwide. While its adoption will automate some roles, AI has created more jobs than it has displaced, with an expected 97 million new roles to be created in the coming years. This is especially true in cities like Pune, which is emerging as a hub for companies eager to leverage this technology to develop solutions that simplify and improve lives in sectors such as education, healthcare, finance, e-commerce and more.
