Our client is a fast-growing, tech-enabled consumer services platform transforming the way urban households access reliable home services. The organisation is building a scalable, technology-led model to deliver convenient and high-quality services to consumers.

The role will drive application security initiatives including threat modelling, VAPT, vulnerability management and secure SDLC practices. The individual will partner with engineering teams on remediation, integrate security tooling into CI/CD pipelines and support security reviews across web, API and mobile applications.

-6-10 years of hands-on Application Security experience across the SDLC

-Strong knowledge of SAST, DAST, SCA, OWASP Top 10 and secure coding practices

-Proven experience in Threat Modelling (STRIDE or equivalent)

-Hands-on experience in VAPT across web applications, REST APIs and mobile applications

-Working knowledge of Java, Python or JavaScript to review code and validate fixes

-Experience integrating security tools into CI/CD pipelines such as GitHub Actions, GitLab CI or Jenkins

-Good to have: exposure to cloud security, network security, EDR/XDR and AI/LLM application security

-Security certifications such as OSCP, eWPT, GWAPT or CSSLP would be an advantage

An opportunity to take ownership of application security within a fast-growing, technology-led organisation. The role offers the opportunity to work closely with engineering teams and build security practices across the SDLC, while gaining exposure to cloud and emerging AI/LLM security challenges.