Lead Cybersecurity - Application Security Testing Project Manager

First Point of contact for app teams who have security scanning questions – Customer Facing

Provide guidelines, oversight, and best practices for:

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Software Composition Analysis (SCA)

Provide guidance to development teams on how to properly integrate application scans into their pipelines.

Gather and analyze threat intelligence for security issues and vulnerabilities.

Develop specifications for application security and mitigation techniques.

Coordinate mitigation and remediation of detected vulnerabilities to maintain a high-security standard and a hardened environment that satisfies AT&T remediation guidelines (facilitate remediation activities between app team and security testers)

Research security enhancements and make recommendations to management.

Perform other duties of a similar nature or level.

Establish and manage program status reporting structure and cadence

Credential gathering/management to facilitate efficient scan scheduling

Process improvements, automation, and innovation that improve both security scanning activities as well as efficient handling of vulnerability reporting and remediation

Establish and manage reporting, escalation, and tracking to ensure adherence to scan schedules

Establish and manage program metrics and measurements

Weekly Hours:40

Time Type:Regular

Location:Bangalore, Karnataka, India

It is the policy of AT&T to provide equal employment opportunity (EEO) to all persons regardless of age, color, national origin, citizenship status, physical or mental disability, race, religion, creed, gender, sex, sexual orientation, gender identity and/or expression, genetic information, marital status, status with regard to public assistance, veteran status, or any other characteristic protected by federal, state or local law. In addition, AT&T will provide reasonable accommodations for qualified individuals with disabilities.

R-19933