Head - Mobile Application Security (15-25 yrs)

Job Description :

1. Should be ready to work from office at either MUMBAI or HYDERABAD or CHENNAI

2. Should have hands-on experience in MOBILE ARCHITECTURE and SECURITY.

3. As the Head of Information Security, this role would report into the Group CISO.

4. Deep familiarity with the OWASP Top 10 and other security concerns for web/mobile applications

5. Good understanding of SAST, DAST, SCA Scanning practices.

6. Scripting and Programming skills (E.g: Python, Perl, Bash, Ruby, PowerShell, react native, etc.)

7. Hands on experience in security tools like, Burp suite, OWASP ZAP, MobSF, Frida, Checkmarx, SonarQube etc.

8. Certifications : CSSLP, eMAPT, CEH, OSWA, OSCP, CPTS, eWPTX, KCSA, GMOB, GWEB, OSWE, CWEE, CISSP, CKS

9. The primary focus of this role is to secure the mobile application and other software assets.

10. Work with existing engineering teams on securing the architecture of new features/capabilities and provide design guidance

11. Working knowledge of mobile app security controls such as RASP (Runtime Application Self Protection).

12. Provide Information security requirements as part of the sprint cycle.

13. Develop technical solutions to help mitigate security vulnerabilities.

14. Analyze vulnerabilities reported to exist on assets and Android/IOS Platform.

15. Perform security code analysis and design reviews.

16. Provide security and secure coding practices training to development team.

17. Conduct research to identify new attack vectors against Android and IOS application.

18. Security architecture review and design guidance

19. Strong mobile application security engineering background

20. Must have general programming expertise and software or web development experience

21. Proficient in Engineering custom-built Android and iOS apps

22. Experience in authentication and encryption methods, including OAuth and Public Key Infrastructure (PKI)

23. Ability to perform Threat modelling and risk assessment of mobile and web apps

24. A minimum of 5+ years of Web and Mobile Application Security testing Experience

25. A minimum of 2+ years of hand-on experience in DevSecOps workflows and CI/CD pipelines