Lead - Application Security - NBFC

Requirements:

- Familiarity with common security standards, controls and implementations (libraries, product security features) - NIST, OWASP, SANS

Experience: 9 to 15 years

- Excellent and professional communication skills (verbal and written) with ability to articulate complex technical topics in a clear and concise manner

- Handling Python, Secure SDLC/ DevSecOps processes and tooling - GitLab, Jenkins, Maven, AWS CodePipeline, Static Application Security Testing - Checkmarx, Semgrep, Veracode, etc. and Dynamic Application Security Testing - Nessus, Detectify, OWASP ZAP, etc.

- Integrating security controls into modern CICD platforms.

- Hybrid and cloud environments and associated security controls and their best practice implementations - AWS, GCP