Application Security Executive

Key Responsibilities

• Assess the security of web applications, mobile applications, APIs, and internal business systems.
• Identify, analyze, and prioritize security vulnerabilities using appropriate assessment methodologies.
• Conduct or coordinate application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
• Review application architecture and design to identify potential security weaknesses.
• Ensure applications follow secure coding practices and established security standards.

• Perform regular vulnerability assessments and coordinate penetration testing activities.
• Track identified vulnerabilities and collaborate with development and technology teams to ensure timely remediation.
• Evaluate security risks based on severity, exploitability, and business impact.
• Maintain vulnerability registers, assessment reports, and remediation documentation.
• Support root cause analysis and recommend preventive measures to reduce recurring security issues.

• Implement and monitor application security policies, procedures, and controls.
• Support compliance with applicable cybersecurity regulations, internal standards, and industry frameworks.
• Assist with security audits, risk assessments, and compliance reviews.
• Maintain evidence and documentation required for internal and external audits.
• Promote security awareness and encourage the adoption of security-by-design principles across technology teams.

• Work closely with software developers, IT operations, infrastructure, and cybersecurity teams.
• Provide actionable recommendations to address application security findings.
• Participate in security reviews during application development, testing, deployment, and maintenance.
• Communicate security risks, remediation priorities, and assessment outcomes to relevant stakeholders.

Must-Have Skills

• Strong knowledge of Application Security and Cybersecurity principles.
• Experience in application vulnerability assessment and remediation.
• Understanding of OWASP Top 10, secure coding practices, and common web application vulnerabilities.
• Familiarity with security testing tools, vulnerability scanners, and penetration testing concepts.
• Knowledge of authentication, authorization, encryption, API security, and access controls.
• Strong analytical, problem-solving, documentation, and communication skills.

Good-to-Have Skills

• Exposure to mutual funds, asset management, investment platforms, or financial services technology.
• Understanding of financial data protection, regulatory compliance, and information security risk management.
• Familiarity with cloud security, DevSecOps, CI/CD pipelines, and security automation.
• Relevant certifications such as CEH, Security+, CSSLP, or other recognized cybersecurity qualifications.