This role is for one of Weekday’s clients
Salary range: Rs 500000 - Rs 1300000 (ie INR 5 - 13 LPA)
Min Experience: 3+ years
Location: Pune
JobType: full-time
We are looking for a skilled and detail-oriented Application Security Executive with 3–6 years of experience in cybersecurity, application security, and information risk management. The ideal candidate will be responsible for identifying application-level vulnerabilities, implementing security controls, conducting security assessments, and ensuring that applications comply with organizational security policies and industry best practices.
The candidate should have a strong understanding of secure software development, vulnerability management, application testing, and risk mitigation. Experience in the mutual funds or asset management industry will be an added advantage, particularly for candidates familiar with financial applications, investment platforms, and systems that handle sensitive financial and customer information.
Requirements
Key Responsibilities
1. Application Security Management
- Assess the security of web applications, mobile applications, APIs, and internal business systems.
- Identify, analyze, and prioritize security vulnerabilities using appropriate assessment methodologies.
- Conduct or coordinate application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
- Review application architecture and design to identify potential security weaknesses.
- Ensure applications follow secure coding practices and established security standards.
2. Vulnerability Assessment and Risk Mitigation
- Perform regular vulnerability assessments and coordinate penetration testing activities.
- Track identified vulnerabilities and collaborate with development and technology teams to ensure timely remediation.
- Evaluate security risks based on severity, exploitability, and business impact.
- Maintain vulnerability registers, assessment reports, and remediation documentation.
- Support root cause analysis and recommend preventive measures to reduce recurring security issues.
3. Cybersecurity Compliance and Governance
- Implement and monitor application security policies, procedures, and controls.
- Support compliance with applicable cybersecurity regulations, internal standards, and industry frameworks.
- Assist with security audits, risk assessments, and compliance reviews.
- Maintain evidence and documentation required for internal and external audits.
- Promote security awareness and encourage the adoption of security-by-design principles across technology teams.
4. Collaboration and Stakeholder Management
- Work closely with software developers, IT operations, infrastructure, and cybersecurity teams.
- Provide actionable recommendations to address application security findings.
- Participate in security reviews during application development, testing, deployment, and maintenance.
- Communicate security risks, remediation priorities, and assessment outcomes to relevant stakeholders.
Must-Have Skills
- Strong knowledge of Application Security and Cybersecurity principles.
- Experience in application vulnerability assessment and remediation.
- Understanding of OWASP Top 10, secure coding practices, and common web application vulnerabilities.
- Familiarity with security testing tools, vulnerability scanners, and penetration testing concepts.
- Knowledge of authentication, authorization, encryption, API security, and access controls.
- Strong analytical, problem-solving, documentation, and communication skills.
Good-to-Have Skills
- Exposure to mutual funds, asset management, investment platforms, or financial services technology.
- Understanding of financial data protection, regulatory compliance, and information security risk management.
- Familiarity with cloud security, DevSecOps, CI/CD pipelines, and security automation.
- Relevant certifications such as CEH, Security+, CSSLP, or other recognized cybersecurity qualifications.