Base Salary
$160k - $195k/yr
Responsibilities
- Own the Application Security Roadmap and contribute to the organization’s Secure Software Development Program.
- Partner with architects, engineers, cloud teams, and business leaders to embed secure-by-design practices across hardware appliances, SaaS platforms, and cloud infrastructure.
- Coach developers on secure coding, vulnerability classes, secure frameworks and libraries, and secure-by-default implementation approaches.
- Triage and validate SAST, SCA, DAST, container, and infrastructure-as-code findings, including false-positive resolution and risk prioritization.
- Tune security tooling and drive adoption of CNAPP, CWPP, WAF, service mesh security, API gateways, SIEM/SOAR, and cloud-native telemetry.
- Conduct Secure by Design reviews and lead threat-modeling workshops covering abuse cases, trust boundaries, attack paths, and mitigations.
- Review authentication, authorization, data flows, secrets handling, logging, monitoring, resiliency, and compliance controls.
- Advise on CI/CD hardening, least privilege, artifact integrity, signing, provenance, secure deployment, dependency security, and supply-chain controls.
- Provide security architecture guidance for AI/ML and GenAI applications, including model and data risk, prompt and agent design, access control, monitoring, and abuse prevention.
- Create secure coding guidance, reference architectures, reusable patterns, and preventative improvements based on incident learnings.
Requirements
- 8+ years of related IT experience.
- 5+ years of experience with application security tools.
- 6+ years of experience conducting application security reviews of new architectures.
- 5+ years of experience with public and hybrid cloud environments, including AWS, Azure, and GCP.
- Strong software development background with the ability to read, understand, and advise on production code and design decisions.
- Expertise in threat modeling and secure architecture reviews for modern web and API-based applications.
- Expertise securing CI/CD and SDLC processes, including pipeline security, secrets management, artifact integrity, build and release controls, and automation.
- Experience managing application security findings and resolving false positives across SAST, SCA, DAST, and related pipeline scanning.
- Working knowledge of AI/ML security risks and mitigations for applications using ML models or GenAI components.
- Strong collaboration, consulting, communication, influence, and developer-enablement skills.
Tech Stack
Categories
About EXL
Choosing a digital partner is about more than capabilities — it’s about collaboration and character. Unrealistic overhauls and off-the-shelf products ignore what matters most — your unique needs, culture, goals, and your legacy data and technology environments. At EXL, our collaboration is built on ongoing listening and learning to adapt our methodologies. We’re your business evolution partner—tailoring solutions that make the most of data to make better business decisions and drive more intelligence into your increasingly digital operations. Whether your goals are scaling the use of AI and digital, redesign operating models, or driving better and faster decisions, we’re here to partner with you to help you gain—and maintain—competitive advantage with efficient, sustainable models at scale. Our expertise in transformation, data science, and change management helps make your business more efficient and effective, improve customer relationships and enhance revenue growth. Instead of focusing on multi-year, resource- and time-intensive platform designs or migrations, we look deeper at your entire value chain to integrate strategies with impact. We use our specialization in analytics, digital interventions, and operations management—alongside deep industry expertise — to deliver solutions that help you outperform the competition. At EXL, it’s all about outcomes—your outcomes—and delivering success on your terms. Share your goals with us and together, we’ll optimize how you leverage data to drive your business forward. For more information, visit www.exlservice.com.