Back to jobs

Manager-Security Assurance.Information Security Group-ISG

Mashreq

Location
India (remote)
Work arrangement
Remote
Employment type
Full Time
Experience
Not specified
Salary
Not provided
Sector
Information-Security-Risk-Manager, IT-Security-Manager, Information-Security-Compliance-Manager, Security-Manager, Application-Security-Engineer, Penetration-Tester, Cybersecurity-Manager, Security-Assurance-Engineer, Security-Assurance-Manager, Info
Posted
14 Oct 2026
Application deadline
13 Dec 2026

About the role

Job Purpose

  • The Manager-Security Assurance role is integral to Mashreq Global Services' Information Security Group (ISG). This role is responsible for strengthening the security posture of modern applications, APIs, cloud-native platforms, and AI-powered systems. The successful candidate will integrate security throughout the Software Development Lifecycle (SDLC), securing applications and APIs, implementing DevSecOps practices, and governing the secure adoption of Artificial Intelligence technologies.
  • Key Responsibilities for the Role
  • Conduct intrusive penetration testing and vulnerability assessments on Applications and APIs.
  • Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures.
  • Automate security tasks to ensure continuous integration, continuous delivery (CI/CD) processes are secure and efficient.
  • Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions.
  • Design, implement, and maintain secure APIs and application security practices within the development lifecycle, integrating security testing tools at every stage.
  • Collaborate with development and operations teams to ensure the incorporation of security controls early in the software development process.
  • Perform security audits and code reviews to identify security flaws in the development pipeline.
  • Identify and evaluate security risks related to software deployments and automation processes.
  • Develop and implement risk management strategies to reduce vulnerabilities in the development and operational environments.
  • Provide actionable feedback and training to teams to improve secure coding and configuration practices.
  • Work with cross-functional teams to integrate security throughout the development lifecycle.
  • Prepare detailed reports, including risk assessments, security vulnerabilities, and actionable remediation strategies for technical and non-technical stakeholders.
  • Stay updated on emerging security threats and vulnerabilities and implement best practices for secure development.

Qualifications

  • Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline.
  • 6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles.
  • Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable.
  • Proven experience in API security, Application security, and AI Security practices.
  • Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools.
  • Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA.
  • Strong experience with programming/scripting languages (e.g., Python) for automation and security integration.
  • Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes).
  • Originally posted on Himalayas

PwD eligibility

Eligibility Requires Verification

The source does not state role-specific PwD eligibility. Verify eligibility with the employer before applying.

Workplace accessibility & accommodations

The employer has not provided accessibility information for this role. You can ask about accommodations in your application.