Appsec Specialist - Lead
Summary
Lead application security specialist conducting security assessments, penetration testing, code reviews, and DevSecOps automation for applications at Adani Group in Ahmedabad, while mentoring a team.
Strategic Roles and Responsibilities
- Conduct regular security assessments of applications to identify and prioritize vulnerabilities.
- Perform penetration testing on web and mobile applications to simulate real-world cyber-attacks and uncover potential weaknesses.
- Review application code to identify and remediate security flaws, ensuring adherence to secure coding practices.
- Evaluate the overall security architecture of applications and propose improvements to enhance resilience against cyber threats.
- Automate repetitive security tasks to improve efficiency and coverage.
- Work closely with cross-functional teams including developers, QA, DevOps, and IT.
- Strong coding and scripting skills (e.g., Python, Java, JavaScript, TypeScript, etc.); ability to prototype tools or support initiatives directly.
- Hands on experience on IaC -Infrastructure as Code.
- Integrate security testing into CI/CD pipelines (DevSecOps).
- Monitor and respond to security incidents, conducting root cause analysis and implementing corrective actions.
- Stay up to date with the latest security trends, threats, and technologies to continuously improve the security posture of applications.
- Build automation scripts to reduce the repetitive task such as reports, attacking scripts, etc
People Management
- Provide mentorship and guidance to junior team members.
- Conduct performance reviews and provide constructive feedback.
- Ensure continuous professional development of team members.
- Foster an environment of learning, excellence, and innovation within the team and across teams.
Educational qualifications & Experience:
- Bachelor’s degree in computer science, Information Security, or related field.
- 8-12 years of experience in application security, including vulnerability assessment and penetration testing.
- Strong understanding of secure coding practices and knowledge of common security vulnerabilities.
- Familiarity with security standards and frameworks such as OWASP, ISO 27001, and NIST .
- Experience with security testing tools and automation.
- Relevant certifications such as CEH, AZ500, AWS Security, Kubernetes, IaC are a plus.
- Excellent communication and collaboration skills.
Ability to stay up-to-date with the latest security trends, threats, and technologies