Company Description
A global manufacturing company focused on building materials and construction solutions, supporting residential, commercial, and industrial projects. Known for its engineering expertise and diverse product portfolio, it operates across multiple markets worldwide.
- Location Mumbai
- Industry Manufacturing
- Experience Range 6-8 years
- Must-have Skills Application Security, Defender for Cloud, Identity and Access Management, Incident Response, Key Vault, Microsoft Azure Security, NSG, OWASP Top 10, PSAT Compliance, Security Governance, SIEM, Vulnerability Management, WAF
Job Summary
Manage application security, vulnerability remediation, security governance, and compliance across digital applications, ensuring security risks are identified and addressed.
Key Responsibilities
- Track vulnerabilities, prioritize risks, and coordinate remediation.
- Monitor PSAT compliance and security controls.
- Conduct security reviews for application changes and access-related activities.
- Coordinate security incidents, investigations, and corrective actions.
- Maintain security risk registers, KPI reports, and audit documentation.
- Support security monitoring, SIEM integration, and vulnerability scanning.
- Coordinate with application teams, support teams, and enterprise cybersecurity.
- Conduct security awareness activities.
Required Skills & Experience
- 6–8 years of experience in application security.
- Knowledge of application security fundamentals and OWASP Top 10.
- Experience in vulnerability assessment, prioritization, and remediation tracking.
- Understanding of security governance, compliance, and PSAT.
- Knowledge of Microsoft Azure security services: Defender for Cloud, Key Vault, NSG, and WAF.
- Understanding of identity and access management, privileged-access reviews, and segregation of duties.
- Experience with security incident response, monitoring tools, and SIEM integration.
Preferred Qualifications
- Knowledge of Secure SDLC, threat modelling, secure code reviews, and DevSecOps.
- Exposure to cloud and application security architecture.
- Knowledge of ISO 27001, NIST, or similar frameworks.
- Certifications such as CISSP, CSSLP, CEH, Security+, SSCP, or Azure Security Engineer Associate.
Other Requirements
- Strong stakeholder communication, coordination, reporting, and security-awareness skills.
