Lead Information Security Engineer-AppSec Champion

Lead incident response for complex computer security events, including technical investigations and digital forensics.

Provide security consulting on large projects ensuring alignment with corporate information security policies and standards.

Lead a team to design, document, test, maintain, and resolve issues for complex security solutions across multiple domains including application security, cryptography, cloud, and endpoint security.

5+ years of Information Security Engineering experience or equivalent through work experience, training, military experience, or education.

Hands-on experience in Application Security, including Security Requirements, Risk Assessments, and Secure SDLC.

Strong knowledge of OWASP Top 10, CWE/SANS Top 25 common vulnerabilities and remediation techniques.

Work Experience Required: 5+ years in Information Security Engineering or equivalent; Notice period: Not explicitly mentioned in the JD.

Experienced in collaborating with development, architecture, infrastructure, and security teams to integrate security within SDLC and application design.

Proven ability to drive security awareness and engage application security champions (ASCs) and stakeholders across teams.

Strong consulting and communication capabilities to influence security adoption without direct authority in complex environments.