oracle
Manager - AppSec/DevSecOps Security Engineer
EXL
Noida, IND
Manager · 8+ years experience
Hybrid
Discovered 1 weeks ago
awsazurecloudformationcsharpgcpgit
Free
Job Fit Check
Base Career helps you apply smarter for this job.
?%
Ready to ScanKey skills for this role
awsazurecloudformation
About the Role
The Manager – Application Security leads delivery of a comprehensive application security programme spanning web application penetration testing, mobile security, source code review, and DevSecOps integration. This role blends technical depth with team leadership and stakeholder management—driving a security-by-design culture across engineering, platform, and product teams. The Manager owns the quality, and operational outcomes of the AppSec function while remaining hands-on when required. This is a practitioner-manager role: the ideal candidate is equally comfortable picking up Burp Suite or reviewing a pull request for injection flaws as managing team capacity, client relationships, and programme metrics.
Key Skills for This Role
awsazurecloudformationcsharpgcpgit
Full Job Posting
Qualifications
- Skills & Capabilities
- Non-Negotiable – Must Have
- 6–8+ years of progressive experience in application security, penetration testing, or a closely related security engineering discipline.
- Expert-level web application penetration testing: complex chained attacks, API abuse, OAuth/OIDC flaws, deserialization, advanced injection techniques.
- Hands-on mobile security testing for Android and iOS (static/dynamic analysis, Frida scripting, MASVS/MSTG alignment).
- Strong source code review skills across at least two major languages—able to identify security defects manually and via SAST tooling.
- Proven experience embedding security into CI/CD pipelines and operating SAST/DAST/SCA tooling in a DevSecOps environment.
- Experience managing or technically leading a team of security engineers or penetration testers.
- Ability to communicate complex security risk credibly to technical and executive audiences.
- Good to Have
- Certifications: eWPTX, OSCP, OSWE, BSCP (Burp Suite Certified Practitioner), GWAPT, GWEB, GPEN, CPENT, or equivalent offensive security credentials.
- Cloud security experience across AWS, Azure, or GCP (IAM, network security, SIEM integration).
- Knowledge of AI/GenAI security risks and securing ML pipelines (MLSecOps).
- Threat modelling frameworks: STRIDE, PASTA, attack trees.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at EXL
Scrum Master
Cleveland, USA
Senior
Seeking an experienced Scrum Master to drive Agile delivery across two parallel Full Stack Development teams — facilitating ceremonies, managing cross-team dependencies, and ensuring predictable, high-quality sprint deli
Discovered TodayView →
Java API / Publication Engineer
Chicago, USA
Senior
We are looking for a Senior Backend Java Developer to design and build the core backend services of a Master Data Management platform for a leading global credit ratings organization. You will engineer the server-side co
Discovered TodayView →
Palantir Foundry Full Stack Engineer
Jersey City, USA
Senior
We are seeking a seasoned Data Engineer with 7-10 years of experience in data engineering, cloud platforms and distributed systems, along with 2+ years of hands-on experience with Palantir Foundry The ideal candidate wil
Discovered TodayView →
Manager
Pune, IND
Manager
Lead data engineering strategy across multiple projects and teams. Drive innovation in data engineering practices and model optimization. Represent the data engineering team in executive meetings. Develop long-term plans
Discovered TodayView →
Collections Analytics Manager – Credit Cards
, USA
Manager
Collections Analytics Manager – Credit Cards
Discovered TodayView →
Lead Assistant Manager
Noida, IND
Lead
• Knowledge of OTC/AR, accounting/Cash applications, and communication skill. • Daily task of receiving cash, applying cash to correct policies, research for unapplied cash, • Reporting and resolving open items with Onsh
Discovered TodayView →
Senior Vice President - Business Enablement
Noida, IND
Senior
The SVP, Business Enablement will build and lead the enterprise enablement engine across Domain Operations and F&A Operations SGUs. The role will operate as the horizontal operating system for delivery excellence—integra
Discovered TodayView →
Scrum Master
Cleveland, USA
Discovered Today
Java API / Publication Engineer
Chicago, USA
Discovered Today
Palantir Foundry Full Stack Engineer
Jersey City, USA
Discovered Today
Manager
Pune, IND
Discovered Today
Assistant Vice President
, IND
Discovered Today
Collections Analytics Manager – Credit Cards
, USA
Discovered Today
Lead Assistant Manager
Noida, IND
Discovered Today
Senior Vice President - Business Enablement
Noida, IND
Discovered Today
