Manager – Security Assurance, Information Security Group

This is a fully remote position, open to applicants in India.

📋 Description

• Execute comprehensive penetration testing and vulnerability evaluations on applications and APIs.

• Evaluate security risks linked to AI-driven applications, LLM integrations, AI agents, and RAG architectures.

• Automate security functions to safeguard CI/CD processes.

• Employ advanced attack methodologies and tools to replicate real-world cyberattacks, identify security weaknesses, and propose mitigation measures.

• Design, implement, and uphold secure APIs and application security protocols throughout the development lifecycle.

• Integrate security testing instruments at every phase of the development lifecycle.

• Work collaboratively with development and operations teams to embed security controls early in the software development process.

• Conduct security audits and code reviews to detect vulnerabilities in the development pipeline.

• Identify and assess security risks associated with software deployments and automation workflows.

• Formulate and execute risk management strategies to minimize vulnerabilities.

• Offer actionable insights and training on best practices for secure coding and configuration.

• Collaborate with cross-functional teams to weave security into the development lifecycle.

• Generate comprehensive reports detailing risk assessments, security vulnerabilities, and remediation approaches.

• Stay informed about emerging security threats and vulnerabilities, implementing secure development best practices.

• Conduct threat modeling and secure architecture evaluations.

• Oversee the secure implementation of AI technologies.

• Ensure adherence to regulatory and compliance standards.

⛳️ Requirements

• Bachelor’s or master’s degree in Computer Science, Information Security, Cybersecurity, or a related field.

• 6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.

• Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly preferred.

• Demonstrated experience in API security, Application security, and AI security practices.

• Proficiency with security testing tools such as Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.

• Knowledge of OpenAPI Specifications, OAuth, SAML, and API Gateway, including enforcing AAA.

• Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.

• Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).

• Experience in the Banking or Financial Services Industry is advantageous.

• Excellent analytical and problem-solving abilities.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and continuous learning.

• Flexible work environment and remote work options.

• Dynamic and inclusive company culture.