Application Security Lead-CXA

· Conduct and manage SAST, DAST, IAST, and SCA scans across applications.

· Perform and support threat modeling for applications and services

· Perform secure design and architecture reviews for applications, APIs, and microservices.

· Embed security checkpoints across requirements, design, build, test, and release phases.

· Provide secure code review support and hands-on remediation guidance.

· Embed application security across the SDLC in collaboration with development and DevOps teams along with proactive remediation.

· Conduct internal and external VAPT for web, mobile, and API applications.

· Perform advanced manual testing using Burp Suite, and custom test cases.

· Validate scanner findings, eliminate false positives, and retest fixes.

· Provide actionable remediation guidance to address identified vulnerabilities.

· Track vulnerabilities and ensure closure within defined SLAs

· Test for business logic, access control, and API security vulnerabilities.

· Integrate security tools into CI/CD pipelines (Jenkins, GitHub, GitLab).

· Implement security quality gates to block critical vulnerabilities.

· Secure pipelines, secrets, artefacts, and third-party dependencies.

· Automate vulnerability tracking via JIRA or Azure Boards.