Secure Development & Assurance Lead (CE100SF RM 4552)

• Secure development & assurance lead (CE100SF RM 4552)
• Company: Source-Right
• Job Location: Bengaluru, Karnataka, India
• Employment Type: Full-time
• Experience Required: 10+ years
• Position: Secure development & assurance lead (CE100SF RM 4552)
• Secure Development And Assurance Lead

You will lead the Secure Software Development Lifecycle (Secure SDLC) program by translating Threat and Risk Assessment (TRA) outputs into actionable engineering work, ensuring cybersecurity requirements and risk mitigation activities are planned, executed, and tracked throughout the product development lifecycle.

You will oversee cybersecurity engineering and assurance activities, including security code reviews, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), vulnerability scanning, penetration testing coordination, security validation, and compliance testing to provide objective evidence that cybersecurity requirements have been implemented and verified.

You will manage the cybersecurity remediation backlog by tracking vulnerabilities identified throughout development, coordinating remediation activities with engineering teams, and ensuring all findings are appropriately prioritized, resolved, or formally dispositioned using risk-based decision-making principles while maintaining traceability to the originating Threat and Risk Assessment (TRA).

You will own the quality, traceability, and audit readiness of Secure SDLC deliverables, including security assessment reports, compliance reports, Product Development Environment Security Asset Lists, Product Security Supplier Reports, Security Vulnerability Monitoring (SVM) registrations, and the Product Security Cybersecurity Release Readiness Report (PSCRR).

You will partner with software engineering, verification, cybersecurity architecture, quality, regulatory, and product management teams to ensure cybersecurity assurance activities are executed consistently, objective evidence is complete, and security-related development activities align with regulatory, organizational, and product release expectations.

You will collaborate with peers to continuously improve Secure SDLC processes, cybersecurity engineering methodologies, security automation, vulnerability management workflows, security assurance practices, and developer enablement across product development organizations.

Your Expertise

Bachelors or Masters degree in Computer Science, Cybersecurity, Software Engineering, Computer Engineering, or a related technical discipline, or equivalent experience. Minimum 10+ years of experience in software engineering, application security, product cybersecurity, secure software development, or software assurance, including 3+ years leading technical teams or cybersecurity initiatives.

Demonstrated expertise in Secure Software Development Lifecycle (Secure SDLC) practices, secure software engineering, application security, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), vulnerability management, penetration testing, security validation, and cybersecurity assurance methodologies for complex software-enabled products.

Strong knowledge of cybersecurity risk management, secure development practices, security verification, vulnerability assessment, remediation management, security control implementation, software assurance, and risk-based engineering decision making, with the ability to translate cybersecurity findings into practical engineering actions.

Experience supporting regulated product development, including security assessment execution, vulnerability disposition, remediation tracking, cybersecurity traceability, compliance testing, objective cybersecurity evidence, Product Security Cybersecurity Release Readiness Reports (PSCRR), and cybersecurity deliverables supporting regulatory submissions and customer cybersecurity communications.

Experience coordinating cross-functional cybersecurity engineering activities across software development, verification, cybersecurity architecture, quality, and regulatory organizations while maintaining objective evidence supporting cybersecurity compliance, product release readiness, and software assurance.

Strong leadership, communication, and stakeholder management skills, with a track record of mentoring technical teams, fostering collaboration, and contributing to the continuous improvement of Secure SDLC practices, cybersecurity engineering processes, security automation, vulnerability management, and software assurance methodologies. Experience in medical devices, laboratory diagnostics, or other regulated industries is highly desirable. Willingness to travel up to 25% as business needs require .