This is a fully remote position, open to applicants in India.

📋 Description

• Define, direct, and implement security protocols for all software, automation, and AI-driven solutions developed internally.

• Take ownership of and uphold secure development practices across all in-house applications, platforms, automation, and tools.

• Conduct and supervise both manual and automated code assessments, including static, dynamic, dependency, and supply-chain evaluations.

• Set forth clear release checkpoints that necessitate security validation prior to the delivery of software or AI systems to customers or internal promotion.

• Carry out secure design evaluations and application threat modeling in the early stages of development to identify and reduce risks before execution.

⛳️ Requirements

• A minimum of 8 years of experience in application security, DevSecOps, or secure software development.

• Extensive hands-on experience in code review across one or more contemporary programming languages (e.g., Python, JavaScript/TypeScript, C#, Java, Go).

• Demonstrated expertise in securing APIs, web applications, microservices, and cloud-native environments.

• Experience in embedding security measures within CI/CD pipelines and modern DevOps practices.

• In-depth knowledge of common vulnerabilities and attack vectors (OWASP Top 10, API security threats, supply chain risks).