Application Security Lead

About the role

The Global Application Security & DevSecOps Lead is responsible for, operating and continuously improving the organisation’s application security function across the complete software development lifecycle.

What you'll do

• AppSec strategy and operating model
• Maintain the global Application Security and DevSecOps strategy
• Establish the AppSec function’s mandate, service catalogue, governance model and engagement process
• Define the division of responsibilities between AppSec, engineering, cloud security, architecture, SOC, vulnerability management, risk and compliance
• Develop a risk-based AppSec control framework for different application types and criticality levels

What you need

• 6–10 years in cybersecurity
• Vulnerability assessment
• Penetration testing
• Cloud security
• OWASP
• Azure
• Root cause analysis
• Any graduate

Good to have

• Terraform
• Security training
• CI/CD