Manager-Security Assurance.Information Security Group-ISG

Mashreq

IndiaremotePosted 9 days ago

Skill Required

Information-Security-Risk-ManagerIT-Security-ManagerInformation-Security-Compliance-ManagerSecurity-ManagerApplication-Security-EngineerPenetration-TesterCybersecurity-ManagerSecurity-Assurance-EngineerSecurity-Assurance-ManagerInformation-Security-ManagerInformation-Systems-Security-ManagersecurityCI/CDPenetration TestingOWASPCybersecurityAzureKubernetesBurp SuiteR ProgrammingautomationPythonOpenAPITestNGDockerdesignDevOpsOAuthCloudAPIsIAMRAGandGenerative AICICDFulltime

Key highlights

Required experience: 6 to 10 years
Key focus: Application, API, and AI Security
Notable requirement: Proficiency with Burp Suite, SAST, SCA, DAST, and IAST

Role overview

The Manager-Security Assurance role is integral to Mashreq Global Services' Information Security Group (ISG). This role is responsible for strengthening the security posture of modern applications, APIs, cloud-native platforms, and AI-powered systems by integrating security throughout the Software Development Lifecycle (SDLC), implementing DevSecOps practices, and governing the secure adoption of Artificial Intelligence technologies.

Responsibilities

Conduct intrusive penetration testing and vulnerability assessments on Applications and APIs.
Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures.
Automate security tasks to ensure continuous integration, continuous delivery (CI/CD) processes are secure and efficient.
Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions.
Design, implement, and maintain secure APIs and application security practices within the development lifecycle, integrating security testing tools at every stage.
Collaborate with development and operations teams to ensure the incorporation of security controls early in the software development process.
Perform security audits and code reviews to identify security flaws in the development pipeline.
Identify and evaluate security risks related to software deployments and automation processes.
Develop and implement risk management strategies to reduce vulnerabilities in the development and operational environments.
Provide actionable feedback and training to teams to improve secure coding and configuration practices.
Work with cross-functional teams to integrate security throughout the development lifecycle.
Prepare detailed reports, including risk assessments, security vulnerabilities, and actionable remediation strategies for technical and non-technical stakeholders.
Stay updated on emerging security threats and vulnerabilities and implement best practices for secure development.

Requirements

Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.
6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.
Proven experience in API security, Application security, and AI Security practices.
Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.
Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA.
Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.
Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).