Application Security Expert

About the role

We are looking for an experienced Application Security Expert to protect our telecom products, platforms and customer‑facing applications. You will lead threat modelling, penetration testing, secure code reviews and DevSecOps initiatives across a wide range of 4G/5G, cloud and micro‑service environments.

Key responsibilities

• Perform web, mobile and API penetration testing, vulnerability assessments and security validation using both automated and manual techniques.
• Execute SAST, DAST, SCA and secure code reviews, analyse false‑positives/negatives and validate remediation.
• Conduct threat modelling and risk assessments using STRIDE, DREAD and other methodologies.
• Secure telecom applications such as BSS/OSS, CRM, Billing, Charging, Provisioning, Order Management and Mobile Apps.
• Integrate security controls into CI/CD pipelines with GitLab and Jenkins.
• Support cloud, container and IaC security for AWS, Azure or GCP, including Kubernetes and Terraform.
• Investigate application security incidents, identify root causes and recommend fixes.
• Assess AI/ML‑enabled application risks and advise on secure data flows.

Required profile

• 10+ years of hands‑on application security or cybersecurity experience.
• Strong background in telecom/Telco application security.
• Proven expertise in penetration testing, DAST, SAST and secure code review.
• Experience with DevSecOps, CI/CD integration and cloud security.

Required skills

• Threat modelling (STRIDE, DREAD)
• Penetration testing tools: Burp Suite, Metasploit, Kali Linux
• Static and dynamic analysis tools: SonarQube, Checkmarx, Fortify
• Vulnerability management platforms: Tenable, Qualys, Rapid7
• CI/CD tools: GitLab, Jenkins
• Container & orchestration: Docker, Kubernetes, Terraform
• Cloud platforms: AWS, Azure, GCP
• Programming languages: Java, Python, JavaScript.NET, Ruby
• Security standards: OWASP Top 10, API Security, NIST, PCI DSS, NIA
• Software Composition Analysis, CVE management, third‑party dependency security