Lead Specialist, Application Security
Pearson VUE
full-time
Posted on:
Location Type: Hybrid
Location: Bangalore • India
Visit company websiteExplore more
Job Level
About the role
- Provide security guidance for AI technologies, including GenAI and agentic systems, ensuring responsible and secure adoption.
- Perform advanced secure code reviews, dependency scanning (SCA), and dynamic application security testing (DAST/IAST) across a wide range of applications and technology stacks.
- Conduct in-depth risk assessments and provide clear, actionable remediation guidance aligned with business priorities.
- Act as an application security subject matter expert, guiding teams on secure design, architecture, and implementation patterns.
- Embed application security controls into SDLC and CI/CD pipelines, ensuring security is integrated without slowing delivery.
- Design, review, and advise on secure authentication and authorization mechanisms, APIs, and identity integrations.
- Identify systemic security weaknesses and drive long-term improvements to reduce recurring vulnerabilities.
- Partner closely with software engineers, architects, platform, and DevOps teams to solve security problems collaboratively.
- Influence secure engineering practices through technical credibility, design reviews, and hands-on support, not policy enforcement.
- Act as a trusted advisor to engineering leadership on application security risks, trade-offs, and improvements.
- Contribute to internal security guidance, patterns, and documentation to improve security maturity at scale.
- Stay current with emerging threats, attack techniques, and application security trends, translating insights into practical improvements.
- Support secure adoption of cloud-native and containerized platforms (AWS, Azure, Kubernetes).
Requirements
- Good exposure to and understanding of AI technologies, including GenAI and agentic systems.
- 8+ years of combined experience in software development, cybersecurity, and application security.
- Proven track record as a senior / expert-level individual contributor in application security.
- Strong hands-on experience with application security tools, including SAST, DAST/IAST, and SCA.
- Deep understanding of secure software development practices and integrating security into SDLC and CI/CD pipelines.
- Proficiency in one or more programming languages such as Python, Java, and JavaScript.
- Strong knowledge of application security standards and frameworks (OWASP, NIST, CIS).
- Advanced understanding of cryptography, authentication, authorization, and identity concepts.
- Practical experience with threat modelling and use of commercial threat modelling tools.
- Experience securing cloud and containerized environments (AWS, Azure, Kubernetes).
- Excellent communication skills with the ability to influence cross-functional teams through technical expertise.
Benefits
- Competitive compensation, benefits, and long-term career growth on a technical expert track.
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
secure code reviewsdependency scanningdynamic application security testingrisk assessmentssecure designapplication security controlsauthentication mechanismsauthorization mechanismsprogramming languagesthreat modelling
Soft Skills
communication skillsinfluencecollaborationtrusted advisortechnical credibility