Application Security Operations Lead

Role Overview

Join a reputable technology company as the Application Security Operations Lead, where you will head a specialised group focused on vulnerability triage and validation across sophisticated enterprise environments. This role blends in-depth technical knowledge, leadership skills, and operational excellence to enhance the company’s application security through vigilant vulnerability management.

Key Responsibilities

• Lead a focused team of security specialists tasked with evaluating, confirming, and prioritising vulnerability reports from security researchers and disclosure initiatives.
• Act as the primary technical contact for intricate security findings, guaranteeing precise severity evaluations and clear, actionable remediation steps.
• Develop and implement uniform triage procedures, streamline workflows, and promote automation via scripting and integration with security platforms.
• Collaborate closely with technical teams, system owners, and external researchers to expedite vulnerability resolution, interpret evolving vulnerability trends, and deliver comprehensive management reports.

Candidate Requirements

• A Bachelor's degree in Cybersecurity, Computer Science, or a related field complemented by an OSCP certification.
• Deep understanding of web application vulnerabilities, including mastery of OWASP Top 10 vulnerabilities, validation techniques, severity assessment, and remediation strategies.
• Proficiency in offensive security tools such as Burp Suite and Kali Linux, capable of independently analyzing and verifying complex security issues.
• Proven leadership experience in managing security teams, mentoring personnel, overseeing security operations, prioritizing tasks, refining processes, and enhancing efficiency with automation or scripting.
• Strong analytical, communication, and stakeholder engagement abilities. Familiarity with bug bounty programs, vulnerability disclosure frameworks, or compliance-driven sectors is a plus.

Additional Information

This position reports within the cybersecurity division of the company. Prospective applicants should note that contact will only be made with shortlisted candidates. The company holds License No: 16S8060 and Registration No: R1988923.