Manager – Security Assurance, Information Security Group

Mashreq

. Conduct intrusive penetration testing and vulnerability assessments on applications and APIs .

Posted 10/14/2026full-timeRemote • IndiaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Application Security, Penetration Testing, and API Security, with a strong focus on integrating security practices throughout the development lifecycle. Proficient in utilizing security testing tools and programming languages to automate security tasks and mitigate vulnerabilities.

Highest-signal resume keywords

Application SecurityPenetration TestingAPI SecuritySecurity Testing ToolsRisk Management Strategies

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Penetration TestingVulnerability AssessmentAPI SecuritySecure Coding PracticesThreat ModellingRisk ManagementAutomation ScriptingSecurity AuditsSecurity Flaw IdentificationCompliance Frameworks

Soft Skills

Analytical SkillsProblem-Solving Skills

Tools & Technologies

Burp SuiteSASTDASTIASTAzure DevOpsDockerKubernetes

Certifications & Qualifications

OSCPCEHAPI Security Certifications

Industry Keywords

BankingFinancial ServicesAI SecurityOpenAPI SpecificationsOAuthSAMLAPI Gateway

Tech Stack

Tools & technologies

AzureCyber SecurityDockerKubernetesPython

About the role

Key responsibilities & impact

Conduct intrusive penetration testing and vulnerability assessments on applications and APIs
Assess security risks associated with AI-powered applications, LLM integrations, AI agents, and RAG architectures
Automate security tasks to secure CI/CD processes
Utilize advanced attack techniques and tools to simulate real-world cyberattacks, assess security gaps, and recommend mitigation actions
Design, implement, and maintain secure APIs and application security practices within the development lifecycle
Integrate security testing tools at every stage of the development lifecycle
Collaborate with development and operations teams to incorporate security controls early in software development
Perform security audits and code reviews to identify security flaws in the development pipeline
Identify and evaluate security risks related to software deployments and automation processes
Develop and implement risk management strategies to reduce vulnerabilities
Provide actionable feedback and training on secure coding and configuration practices
Work with cross-functional teams to integrate security throughout the development lifecycle
Prepare detailed reports with risk assessments, security vulnerabilities, and remediation strategies
Stay updated on emerging security threats and vulnerabilities and implement secure development best practices
Perform threat modelling and secure architecture reviews
Govern secure adoption of AI technologies
Ensure compliance with regulatory and compliance frameworks

Requirements

What you’ll need

Bachelor’s or master’s degree in computer science, Information Security, Cybersecurity, or a related discipline
6 to 10 years of progressive experience in Application Security, Penetration Testing, and API security roles
Relevant certifications (e.g., OSCP, CEH, API Security certifications) are highly desirable
Proven experience in API security, Application security, and AI Security practices
Proficiency with security testing tools like Burp Suite, SAST, SCA, DAST, IAST, and dynamic testing tools
Familiarity with OpenAPI Specifications, OAuth, SAML and API Gateway, including enforcing AAA
Strong experience with programming/scripting languages (e.g., Python) for automation and security integration
Familiarity with security-focused DevOps tools (e.g., Azure DevOps, Docker, Kubernetes)
Experience in the Banking or Financial Services Industry an advantage
Strong analytical and problem-solving skills