Own and evolve the application security strategy, testing roadmap, and service catalogue aligned to business and regulatory requirements.
Lead, and mentor a team of AppSec engineers and penetration testers; manage workload, quality, and career development.
Act as the primary escalation point for application security risk decisions across engineering and product leadership.
Drive continuous improvement in AppSec tooling, methodologies, and coverage metrics.
Represent the AppSec function in client discussions, audits, risk committees, and vendor assessments.
Web Application Penetration Testing
Oversee and conduct advanced web application penetration testing including complex business logic, authentication/authorisation flaws, API abuse, and chained attack scenarios.
Define and maintain testing methodology aligned to OWASP Testing Guide, PTES, and client-specific requirements.
Review and quality-assure penetration test reports produced by the team before delivery to clients or stakeholders.
Drive responsible disclosure and coordinated vulnerability management for critical findings.
Mobile Application Security
Lead mobile security assessments for Android and iOS—static/dynamic analysis, reverse engineering, and runtime manipulation (Frida, objection, Drozer).
Establish and maintain mobile security standards aligned to OWASP MASVS and MSTG across product teams.
Guide development teams on secure mobile architecture: certificate pinning, secure storage, and inter-process communication security.
Source Code Review
Conduct and oversee manual source code security reviews across multiple languages (Java, Python, JavaScript/TypeScript, Go, C#, and others).
Define code review standards and integrate SAST tooling (Semgrep, Checkmarx, Veracode, SonarQube) into development workflows.
Provide actionable, developer-centric findings with clear severity ratings and remediation guidance.
Track remediation SLAs and report on code security posture trends over time.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
