Capability Lead – Application Security

Application Security Capability Leads should possess strong experience in application security and actively contribute to the development and maturity of the application security practice. This includes hands-on expertise across application security domains, supporting practice growth, enabling go-to-market initiatives, and contributing to thought leadership and best practices within the practice.

Key Responsibilities:

1. Practice Development:

·       Develop and execute strategic plans for the application security practice

·       Develop/enhance service capabilities in the areas of application security including application security assessments, threat modelling, vulnerability scanning, penetration testing, and code reviews to identify and mitigate potential security issues.

·       Develop service offerings, pricing strategies, and sales collateral

• Oversee security assessments programs (DAST/SAST/SCA) and application security audits
• Collaborate with sales teams, pre-sales teams and other internal and external stakeholders to proactively position application security services to customers.
• Establish solution/service center of excellence (CoE) through collaboration with vendors and partners including startups
• Stay updated on the latest security threats, trends, and technologies to provide advisory to customers.

2. Delivery and Operations:

• Govern application security delivery
• Manage application security CoEs to
• Stay up-to-date with emerging threats, technologies, and application exploit techniques

3. Go-to-Market:

• Collaborate with sales teams to develop and execute go-to-market strategies
• Develop and deliver thought leadership content (e.g., blog posts, white papers, webinars, conference talks)
• Build relationships with key clients, partners, and industry influencers

4. Leadership:

• Lead and mentor a team of security professionals, including managers and individual contributors
• Foster a culture of innovation, collaboration, and continuous learning

Qualifications & Experience:

• 15+ years of experience in application security, with 8+ years in leadership roles
• Proven track record of building and managing successful security practices
• Strong knowledge of penetration testing, red teaming, purple teaming, breach attack simulation, and ethical hacking
• Experience with practice development, go-to-market strategies, and sales enablement
• Excellent leadership, communication, and interpersonal skills
• Industry-recognized security certifications (e.g., OSCP, CEH, CISSP, CISA, CISM)