Manager - Application Security

Kenvue

Bangalore, Karnataka
Permanent
Full-time

30 days ago
Apply easily

About KenvueAbout KenvueKenvue is the world’s largest pure-play consumer health company by revenue. Built on more than a century of heritage, our iconic brands, including Aveeno®, Johnson’s®, Listerine®, and Neutrogena® are science-backed and recommended by healthcare professionals around the world. At Kenvue, we believe in the extraordinary power of everyday care and our teams work every day to put that power in consumers’ hands and earn a place in their hearts and homes.Not all products mentioned are sold globally.Disclaimer: ANSR is partnering with Kenvue, as we actively seek exceptional talent to join this rapidly growing team in Bangalore. Successful candidates will be recruited by ANSR on behalf of Kenvue.Job DescriptionJob Location: Kenvue GCC, BangaloreResponsibilities:

Conduct comprehensive security assessments of applications to identify vulnerabilities and weaknesses.
Perform penetration testing, code reviews, and vulnerability scanning to ensure the security of web and mobile applications.
Collaborate with development teams to provide guidance on secure coding practices and assist in the remediation of identified security issues.
Develop and maintain security standards, policies, and procedures related to application security.
Stay current with the latest security trends, threats, and vulnerabilities affecting application security.
Participate as the lead in incident response and security incident investigations related to application security.
Work closely with cross-functional teams to integrate security into the technology development lifecycle.
Lead a small team and facilitate standup meetings
Maintain locally developed custom php tools
Utilize and manage security tools such as Snyk, OWASP ZAP, and custom php tools

Qualifications:

Bachelor's degree in Computer Science, Information Security, or related field or 7+ years of cyber security experience.
Relevant certifications such as CISSP, CEH, CompTIA Security+, Azure Security Engineer, and AWS certified Security Specialty, and Cloud are a plus.
4 years of Azure (or AWS) security experience, identity and access, applications, networking, and security standards and best practices
Knowledge of Azure functions a plus
Microsoft Power Platform experience, Power App development experience
Experience with WAF solutions such as Cloudflare, Akamai, etc.
Experience with security assessment tools such as Snyk, OWASP ZAP, etc.
Experience with programming/scripting skills in languages such as php, Python, Java, or similar.
Working experience with application security assessments, vulnerability testing, and secure code reviews.
Knowledge of web application security vulnerabilities and common attack vectors (e.g., OWASP Top 10).
Understanding of encryption technologies, authentication mechanisms, and secure coding practices.
Experience with the roles, processes, and tools to enable a high-performing DevOps practice in an Agile environment.
Excellent problem-solving and analytical skills, along with effective communication and teamwork abilities.
Experience leading a small team and facilitating stand up meetings.
Experience with Atlassian tools such as Jira, Confluence, and Bitbucket.
Knowledge of DNS and IP management

Kenvue