Application Security Manager

About the role

We are seeking an Application Security Manager to join ICICI Bank’s Information Security team. The role focuses on safeguarding the bank’s applications through comprehensive security testing, vulnerability management, and adherence to industry frameworks.

Key responsibilities

• Lead application security testing using SAST, DAST and IAST techniques.
• Utilize tools such as OWASP ZAP, Burp Suite and Fortify to identify and assess vulnerabilities.
• Establish and manage the full vulnerability management lifecycle, including scanning, assessment, prioritisation and remediation.
• Develop security test plans, dashboards and detailed reports for technical and non‑technical stakeholders.
• Review security assessment reports for accuracy and ensure actionable findings.
• Mentor and lead cross‑functional teams in security assessment activities.
• Implement industry frameworks (NIST Cybersecurity Framework, OWASP Top Ten, SANS Top 25) to enhance application security posture.
• Handle security vulnerability exceptions and provide remediation recommendations aligned with BFSI guidelines.

Required profile

• Strong knowledge of application security testing methods and tools.
• Experience in vulnerability management within the BFSI domain.
• Ability to communicate security risks and mitigation strategies to diverse audiences.
• Proven leadership and team‑mentoring capabilities.

Required skills

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Interactive Application Security Testing (IAST)
• OWASP ZAP
• Burp Suite
• Fortify
• Vulnerability Management lifecycle
• NIST Cybersecurity Framework
• OWASP Top Ten
• SANS Top 25