Manager Application & Product Security

About the role

JazzWorld is seeking a Manager Application & Product Security to lead and evolve its application security program. The role will embed security throughout the software development lifecycle, protect APIs, micro‑services and mobile products, and ensure resilience against emerging cyber threats.

Key responsibilities

• Define and drive the Application Security strategy across all JazzWorld products.
• Establish and govern a Secure SDLC framework, including policies, standards and secure coding guidelines.
• Conduct threat modelling (STRIDE, attack trees) and review secure architectures for web, mobile, API and cloud‑native platforms.
• Integrate OWASP‑based security controls into CI/CD pipelines using SAST, DAST, SCA and IAST tools.
• Automate security testing, define security gates and release criteria, and work with DevOps to shift‑left security.
• Implement API security controls such as OAuth2, JWT, rate limiting and bot protection.
• Secure Android and iOS applications with reverse‑engineering protection, runtime protection (RASP) and secure storage.
• Provide secure coding training, remediation guidance and foster a security‑first culture.

Required profile

• BS/MS in Cybersecurity, Information Security or related field.
• Minimum 6 years of experience in application security, preferably in banking or telecom.
• Proven experience designing security for mobile apps, APIs and cloud platforms.
• Strong ability to lead a team, manage stakeholders and document security processes.

Required skills

• Application Security
• Secure SDLC
• OWASP Top 10 & ASVS
• SAST, DAST, SCA, IAST
• CI/CD pipeline integration
• OAuth2, JWT
• API security controls
• Threat modelling (STRIDE, attack trees)
• Mobile app security testing
• Reverse engineering protection & RASP
• Penetration testing