Application Security Professional

1. ROLE OVERVIEW

We are looking for an Application Security professional with strong expertise in Threat Modelling and Secure Design to help embed security into the application development lifecycle.

This role works closely with development, architecture, and business teams to identify security risks early and ensure applications are designed securely and in compliance with DLVN standards.

2. KEY RESPONSILBILITIES

Threat Modelling

• Lead threat modelling sessions with development and business teams
• Apply methodologies such as STRIDE and PASTA
• Document threats, risks, and mitigation plans

Secure Design

• Provide security input during application and API design reviews
• Define and promote reusable secure design patterns
• Support developers in integrating security controls early

Collaboration & Enablement

• Work with Agile teams to embed security requirements
• Deliver training/workshops on secure design and threat awareness
• Communicate security risks clearly to both technical and business stakeholders

Governance & Compliance

• Ensure threat modelling aligns with SSDLC checkpoints
• Support audits and compliance documentation
• Contribute to improving Application Lifecycle Management and Technology Standards policies.

Time Allocation (approximate):

• Threat Modelling (35%),
• Secure Design Reviews (30%),
• Collaboration & Training (20%),
• Governance & Compliance (15%).

The distribution may vary depending on project demands and audit cycles.

3. REQUIRED QUALIFICATIONS:

Bachelor’s degree in IT, Computer Science, or related field

4+ years of experience in application security or secure architecture

Hands-on experience with threat modelling (STRIDE, PASTA, etc.)

Strong knowledge of OWASP Top 10 and modern application architectures (APIs, microservices, cloud)

Excellent communication and facilitation skills

4. NICE TO HAVE:

Experience in DevSecOps environments

Knowledge of cloud security (Azure/AWS/GCP)

Security certifications (CISSP, CSSLP, etc.)