Application security expert

We are seeking an experienced Application Security Expert to assess and strengthen the security of Telco products, applications and platforms. The role will focus on threat modelling, penetration testing, DAST/SAST, secure code review, vulnerability assessment and Dev Sec Ops across enterprise, telecom and customer-facing applications. Key Responsibilities Conduct web, mobile and API penetration testing , vulnerability assessments and security validation using both automated and manual techniques. Perform SAST, DAST, SCA and secure code reviews , including false-positive/false-negative analysis and remediation validation. Conduct threat modelling and application security risk assessments using methodologies such as STRIDE and DREAD. Secure telecom applications including BSS/OSS, CRM, Billing, Charging, Provisioning, Order Management, Subscriber Management, Self-Care, Mobile Applications and APIs . Assess security across 4 G/5 G, EPC/5 GC, IMS, API Gateways, microservices and network-facing applications . Integrate application security controls and security gates into CI/CD pipelines using Git Lab and Jenkins . Secure modern architectures involving cloud, containers, Kubernetes and Infrastructure-as-Code . Support investigation of application security incidents, identify root causes and recommend remediation. Assess security risks associated with AI/ML-enabled applications, APIs and data flows . Work closely with developers, architects, Dev Ops, cloud and cybersecurity teams to embed security throughout the SDLC. Required Skills & Experience 10+ years of Application Security / Cybersecurity experience , with strong hands-on App Sec expertise. Proven experience in DAST, SAST, penetration testing and secure code review . Strong telecom/Telco application security experience. Strong knowledge of OWASP Top 10, API Security, NIST, PCI DSS and NIA . Hands-on experience with Burp Suite, Metasploit, Kali Linux, Sonar Qube, Checkmarx or Fortify . Experience with Tenable, Qualys or Rapid7 . Strong Dev Sec Ops experience with Git Lab, Jenkins, Docker, Kubernetes and Terraform . Experience securing AWS, Azure or GCP environments. Strong knowledge of SCA, CVE management and third-party/open-source dependency security . Preferred Certifications CISSP | OSCP | CEH | CCSP or equivalent security certifications. #J-18808-Ljbffr