Application Security Manager at Experian

Hyderabad, Telangana, India -

Full Time

Start Date

Immediate

Expiry Date

01 Sep, 26

Salary

0.0

Posted On

03 Jun, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Penetration Testing, SAST, SCA, DAST, Cloud Security, Risk Governance, Vulnerability Management, OWASP Top 10, SOC 2, PCI-DSS, HIPAA, Team Leadership, Security Strategy, AI Transformation, Network Security

Industry

Information Services

Description

Company Description Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realize their financial goals and help them save time and money. We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments. We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com. Job Description Lead and mentor a team of application security engineers and penetration testers. Guide team members’ daily project and operational activities Manage and mature the application security program through direct interactions. Actively seek to improve our application security and penetration testing operations. Identify improvement opportunities in all processes and activities involved. Participate in security and technology strategic planning to ensure identified risk governance is incorporated into the enterprise strategy. Appropriately assess risk and provide software security advice when business decisions are made. Set strategies, processes and oversee the management and operations of SAST, SCA, DAST, and penetration testing operations to provide coverage for the application portfolio. Function as a subject matter expert in application, network and cloud penetration testing, scanning platforms, exploits, tools, and techniques. Building and executing a security testing strategy and lead AI first transformation to improve effectiveness and efficiency of our services. Manage test resources to ensure maximum performance. Ensuring secure outcomes of application and configuration testing. Oversee vulnerability identification and measurement. Guide development teams through a review of their applications and risks against common application flaws like OWASP Top 10 and others Provide visibility to senior management along with context and prioritization of the issues. Operate as an advocate for Security in interactions with internal and external teams. Work with Risk & Compliance teams on SOC 2, PCI-DSS, HIPAA, and other audits as needed Research and recommend policy and procedures as they relate to Application Security Lead projects to implement security technologies for the entire enterprise. Define security guardrails through automated tool policies, SLAs, custom rules, and support the developer community. Help the enterprise manage vulnerabilities across automated tooling and manual security assessments. Work with Champions to build relationships and ensure key activities are supported and deliverables are achieved in a timely manner. Support the AppSec technical team and ensure relationships with Business and team maximised and effective. Qualifications Four-year college diploma or university degree in computer science or computer engineering, and/or 5 years equivalent work experience in application development. Preferred certifications are listed as follows OSCE3, OSCE, OSCP, OSWE, CCSAS, CCT, CRT, GXPN, CISSP or CSSLP or similar certification. 3-5 years supervisory experience preferred. 8-13 years direct experience in enterprise-level applications security. Previous experience leading teams of penetration testers strongly encouraged and highly desired. Experience with cloud-based application architectures Additional Information Our uniqueness is that we celebrate yours. Experian's culture and people are important differentiators. We take our people agenda very seriously and focus on what matters; DEI, work/life balance, development, authenticity, collaboration, wellness, reward & recognition, volunteering... the list goes on. Experian's people first approach is award-winning; World's Best Workplaces™ 2024 (Fortune Top 25), Great Place To Work™ in 24 countries, and Glassdoor Best Places to Work 2024 to name a few. Check out Experian Life on social or our Careers Site to understand why. Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity. Experian Careers - Creating a better tomorrow together Find out what its like to work for Experian by clicking here Employee Status: Regular Role Type: Hybrid Department: Information Security Schedule: Full Time

Responsibilities

Lead and mentor a team of application security engineers and penetration testers to mature the enterprise application security program. Oversee the implementation of security technologies and guide development teams in mitigating risks against common application flaws.