Application Security Lead

INR 2400K-3340K (estimate) Senior-level Full Time Found 9d ago

Tasks

• Act as security escalation point for risks and vulnerabilities
• Conduct access reviews and risk assessments
• Coordinate SAP security patches
• Coordinate SAP security patches deployments
• Define and execute application security and SAP security strategy
• Design review and deployment of SAP roles and access controls
• Engage with architecture and security teams
• Ensure application patching and secure coding
• Ensure compliance with security frameworks and policies
• Govern Segregation of Duties and sensitive access
• Integrate security into CI/CD pipelines
• Lead SAP Security, Authorization, GRC Governance operations
• Lead audit support and controls testing
• Lead lessons learned and continuous improvement
• Manage SAP GRC Access Control platform and compliance
• Manage security partners and resources
• Oversee application security components and coverage
• Perform risk assessments for design changes
• Perform threat modeling and secure design reviews
• Promote security culture and standards
• Provide expertise in secure design and compliance
• Secure cloud environments (Azure, AWS)
• Support DevSecOps and Security Champions
• Support detect-and-respond processes
• Support zero harm safety culture

Perks/Benefits

• N/A

Skills/Tech-stack

AWS | Access Control | Application Firewalls | Application Security | Application security SDLC | Assessment Methodologies | Authorization | Azure | Azure DevOps | Burp Suite | CD pipelines | CI/CD | CI/CD pipelines | CWE | Checkmarx | Coding Standards | Communication | Container Security | DAST | Dependency Scanning | DevSecOps | FAIR | Fortify | GCP | GRC Access Control | GitLab | ISO | Incident Response | Jenkins | NIST | OWASP Top | OWASP Top 10 | Octave | Penetration Testing | Risk Assessment | SAP Security | SAP security architecture | SAST | SCA | SOD | Secure Coding | Secure coding standards | Security Architecture | Security Assessment Methodologies | Security Compliance | Security Documentation | Security SDLC | Security assessment | Security auditing | Security tooling | SonarQube | Stakeholder management | Threat modeling | Top 10 | Veracode | Vulnerability analysis | Web Application | Web Application Firewalls