Kenvue

APPLICATION SECURITY MANAGER

Workday Integrations- Manager

OT Security Engineer

Generative AI TPO

GenAI ML Engineer, Data Science

Data Scientist

Senior Software Engineer

The Application Security Manager at KENVUE GCC in Bangalore is responsible for conducting comprehensive security assessments of applications, performing penetration testing, code reviews, and vulnerability scanning.  They will collaborate with development teams on secure coding practices and remediation of security issues.  The role also involves developing and maintaining security standards and policies, staying updated on security trends, leading incident response, and working with cross-functional teams to integrate security into the development lifecycle.  The position requires leading a small team, managing security tools (Snyk, OWASP ZAP, custom PHP tools), and utilizing Azure/AWS security expertise. Experience with WAF solutions and scripting languages is essential.

<div class="jobs-box__html-content jobs-description-content__text t-14 t-normal
 jobs-description-content__text--stretch" id="job-details" tabindex="-1">
 <h2 class="text-heading-large">
 About the job
 </h2>

 <div class="mt4">
 
 Job Description KENVUE GCC, BENGALURU Manager (Application Security) Job Location- Bangalore Responsibilities- <ul><li> Conduct comprehensive security assessments of applications to identify vulnerabilities and weaknesses. </li><li> Perform penetration testing, code reviews, and vulnerability scanning to ensure the security of web and mobile applications. </li><li> Collaborate with development teams to provide guidance on secure coding practices and assist in the remediation of identified security issues. </li><li> Develop and maintain security standards, policies, and procedures related to application security. </li><li> Stay current with the latest security trends, threats, and vulnerabilities affecting application security. </li><li> Participate as the lead in incident response and security incident investigations related to application security. </li><li> Work closely with cross-functional teams to integrate security into the technology development lifecycle. </li><li> Lead a small team and facilitate standup meetings </li><li> Maintain locally developed custom php tools </li><li> Utilize and manage security tools such as Snyk, OWASP ZAP, and custom php tools </li></ul>
Qualifications- <ul><li> Bachelor's degree in Computer Science, Information Security, or related field or 7+ years of cyber security experience. </li><li> Relevant certifications such as CISSP, CEH, CompTIA Security+, Azure Security Engineer, and AWS certified – Security Specialty, and Cloud are a plu s. </li><li> 4 years of Azure (or AWS) security experience, identity and access, applications, networking, and security standards and best practices </li><li> Knowledge of Azure functions a plus </li><li> Microsoft Power Platform experience, Power App development experience </li><li> E xperience with WAF solutions such as Cloudflare, Akamai, etc. </li><li> Experience with security assessment tools such as Snyk, OWASP ZAP, et c. </li><li> Experience with programming/scripting skills in languages such as php, Python, Java, or similar. </li><li> Working experience with application security assessments, vulnerability testing, and secure code reviews. </li><li> Knowledge of web application security vulnerabilities and common attack vectors (e.g., OWASP Top 10). </li><li> Understanding of encryption technologies, authentication mechanisms, and secure coding practices. </li><li> Experience with the roles, processes, and tools to enable a high-performing DevOps practice in an Agile environment. </li><li> Excellent problem-solving and analytical skills, along with effective communication and teamwork abilities. </li><li> Experience leading a small team and facilitating stand up meetings. </li><li> Experience with Atlassian tools such as Jira, Confluence, and Bitbucket. </li><li> Knowledge of DNS and IP management </li></ul>
Job Qualifications <ul><li> Bachelor's degree in Computer Science, Information Security, or related field or 7+ years of cyber security experience. </li></ul>
Primary Location Asia Pacific-India-Karnataka-Bangalore Job Function Information Security
 
 </div>
 </div>