Opportunity at
InMobiManager- Application Security
InMobi is hiring a Manager for Application Security in Bengaluru. This full-time, on-site role sits in the Opportunity group within the cyber security function, which sets…
Career Tools
About This Role
InMobi is hiring a Manager for Application Security in Bengaluru. This full-time, on-site role sits in the Opportunity group within the cyber security function, which sets security benchmarks for organizations running cloud-native, DevOps-first systems. Its areas of focus are product and platform security, risk management for cloud-native systems, and detection and response. The job combines technical leadership with hands-on work. Roughly 60 percent of the time goes to application security…
Job Description
InMobi is hiring a Manager for Application Security in Bengaluru. This full-time, on-site role sits in the Opportunity group within the cyber security function, which sets security benchmarks for organizations running cloud-native, DevOps-first systems. Its areas of focus are product and platform security, risk management for cloud-native systems, and detection and response.
The job combines technical leadership with hands-on work. Roughly 60 percent of the time goes to application security testing, vulnerability assessments, penetration testing, code reviews, AI and machine learning security testing, and automation. The remaining time goes to running the application security domain, setting strategy, leading and developing a team of AppSec engineers, and coordinating with stakeholders.
The manager runs the AppSec program for every product, platform and engineering group, defines measures of AppSec and AI-security maturity, and reports on risk posture to senior leaders. Controls go in early via tooling, protective rails and secure-by-design thinking. Other duties include reviewing architecture and designs for new applications, APIs and AI systems, enforcing secure coding and threat modeling standards, governing remediation against SLAs, and supporting audit readiness and incident handling alongside governance-risk-compliance colleagues.
The posting asks for between 10 and 14 years of experience, with a record of leading application security or DevSecOps teams while staying technical. A solid command of static and dynamic testing, plus secure development lifecycle practice, is essential, along with working knowledge of LLM and AI security frameworks such as the OWASP LLM Top 10 and MITRE ATLAS. Experience with tools such as Checkmarx, Burp Suite Enterprise and OWASP ZAP is expected, and scripting and container security skills are required.
Responsibilities
- Lead the application security program, including strategy, roadmap and KPIs
- Carry out static and dynamic scans, hand code review, pentesting and vulnerability confirmation across web, mobile, API and cloud targets
- Review AI/ML estates: LLM apps, model APIs, retrieval pipelines and autonomous agent flows
- Manage, mentor and prioritize a team of AppSec engineers
- Embed security controls early in development and ML lifecycles
- Oversee vulnerability triage and ensure fixes close within SLAs
- Conduct architecture and design reviews and define secure coding and threat modeling standards
- Report AppSec performance and risk posture to senior leadership
Requirements
- Between 10 and 14 years of experience
- Demonstrated leading role in AppSec, DevSecOps or secure software engineering
- Deep practical grasp of static and dynamic testing and building security into the development lifecycle
- Working knowledge of AI and LLM security and testing frameworks
- Strong stakeholder management to drive timely remediation
- Scripting in Python, Bash or PowerShell, and container security with Docker or Kubernetes
Qualifications
- OSCP, GWAPT, GPEN or equivalent certifications (preferred)
- AI security certifications such as CAISP (a plus)
- Experience with AI security testing tools such as Garak or PyRIT (a plus)
- Background in growing security programs with measurable improvements
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the role located?
The role is based in Bengaluru and is listed as on-site.
What experience is required?
Between 10 and 14 years of experience, including a demonstrated leading role in AppSec, DevSecOps or secure software engineering.
Is it full-time?
Yes, the role is listed as full-time.
What is the salary?
The posting does not specify a salary.
How do I apply?
The posting does not describe an application process.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.