Lead Application Security Engineer

Lead Application Security Engineer

We are seeking a Lead Application Security Engineer to ensure the security of web and API-based applications for a large financial organization. The role involves:

• Addressing OWASP Top 10 vulnerabilities.
  
• Defining guidelines for secure Web and REST API applications.
  
• Implementing proactive steps to avoid vulnerabilities before build/deployment.
  
• Conducting reactive testing in QA/UAT to identify vulnerabilities.
  
• Mitigating common security risks and attacks.
  
• Implementing Content Security Policy (CSP) and CORS.
  
• Overseeing data encryption and hashing practices.
  
• Using modern security tools for vulnerability scanning (Static and Dynamic) and threat detection.
  

Required: 8+ years of Strong experience in application security and risk management