Cloud Native Application Security Professional

Job Title: Cybersecurity Leader for Cloud-Native Applications ">

About the Role:

The Cybersecurity Leader for Cloud-Native Applications will oversee the organization's cloud-native security architecture, ensuring alignment with target architectures and modern development practices. This role involves strategic oversight of security architecture, CI/CD pipeline security, secure software development lifecycle (SDLC), vulnerability management and mitigation, and cross-functional collaboration.

Key Responsibilities:

• ">

• Strategic Oversight of Security Architecture:

  ">

  The successful candidate will define, design, and implement the target application security architecture in line with organizational goals and industry/regulatory standards. They will establish a comprehensive application security strategy, ensuring seamless integration into enterprise architecture and technology roadmaps. The candidate will conduct architectural reviews to identify risks and recommend mitigation strategies, focusing on secure and scalable solutions.

  ">

• CI/CD Pipeline Security:

  ">

  The Cybersecurity Leader will lead the integration of security controls into CI/CD pipelines, ensuring automated detection and remediation of vulnerabilities.

  ">

• Secure Software Development Lifecycle (SDLC):

  ">

  The candidate will develop and enforce secure development guidelines, ensuring security is incorporated at every stage of the SDLC. They will provide leadership in threat modelling, secure coding practices, and software code quality management across development teams. The candidate will work with application teams to prioritize security requirements, balancing business objectives with technical risks.

  ">

• Vulnerability Management and Mitigation:

  ">

  The Cybersecurity Leader will oversee the overall strategy for SAST, DAST, identifying and remediating vulnerabilities. They will ensure timely resolution of identified issues, coordinating efforts across development, QA, and DevOps teams. The candidate will maintain and communicate detailed metrics and dashboards on the security posture of applications and pipelines.

  ">

• Cross-Functional Collaboration:

  ">

  The successful candidate will partner with application teams to align security architecture with business needs and project timelines. They will act as the primary liaison between technical teams and executive leadership, effectively conveying security risks and architectural priorities.

  ">

Requirements:

The ideal candidate should possess a Bachelor's degree in computer science, Information Security, or a related field. A Master's degree would be an added advantage. They should have information systems security professional certifications, such as CISSP, CSSLP, CEH, OSCP or CREST. At least 15 years of experience in cybersecurity, with a focus on application security, security architecture, and secure development practices are required. Proven expertise in designing and implementing security controls within CI/CD pipelines in Agile and DevOps environments is essential. Demonstrated success in defining and overseeing secure application architectures for cloud-native and hybrid environments is also necessary. Deep understanding of secure software development lifecycle (SDLC) methodologies and best practices is required.

A team-player with systematic problem-solving approach, strong people skills, excellent interpersonal skills, and ability to negotiate with, influence and engage others in complex situations are expected. The incumbent should have a deep understanding of customer needs, assess requirements and identify solutions to non-standard requests. Strong communication network internally within the enterprise (80%) and externally with Vendors and Service Providers (20%) is also required.