Manager – Security Assurance, Information Security Group

• Conduct intrusive penetration testing and vulnerability assessments on applications and APIs
• Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures
• Automate security tasks to secure CI/CD processes
• Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions
• Design, implement, and maintain secure APIs and application security practices within the development lifecycle
• Integrate security testing tools at every stage of the development lifecycle
• Collaborate with development and operations teams to incorporate security controls early in software development
• Perform security audits and code reviews to identify security flaws in the development pipeline
• Identify and evaluate security risks related to software deployments and automation processes
• Develop and implement risk management strategies to reduce vulnerabilities
• Provide actionable feedback and training on secure coding and configuration practices
• Work with cross-functional teams to integrate security throughout the development lifecycle
• Prepare detailed reports with risk assessments, security vulnerabilities, and remediation strategies
• Stay updated on emerging security threats and vulnerabilities and implement secure development best practices
• Perform threat modelling and secure architecture reviews
• Govern secure adoption of AI technologies
• Ensure compliance with regulatory and compliance frameworks

• Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline
• 6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles
• Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable
• Proven experience in API security, Application security, and AI Security practices
• Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools
• Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA
• Strong experience with programming/scripting languages (e.g., Python) for automation and security integration
• Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes)
• Experience in the Banking or Financial Services Industry an advantage
• Strong analytical and problem-solving skills