Technology Lead

Responsibilities

• Perform regular application security assessments using automated and manual techniques, including SAST, DAST, and SCA
• Identify, validate, and document security vulnerabilities with clear technical details and business impact
• Integrate and operationalize security controls and testing tools within CI/CD pipelines to enable early detection
• Support and enhance DevSecOps practices by maintaining and improving security tooling within the software development lifecycle
• Review application and cloud environments for security gaps related to authentication, authorization, and encryption
• Partner with application development, DevOps, and cloud engineering teams to drive effective remediation strategies
• Identify opportunities for automation in security testing, validation, and vulnerability management processes

Requirements

• Bachelor's degree in Computer Science, Computer Engineering, Information Security, or a related technical discipline
• Minimum 5 years of hands-on experience in Application Security
• At least 2 years of experience in DevSecOps or secure CI/CD implementations
• Strong experience with SAST, DAST, and SCA methodologies
• Deep understanding of OWASP Top 10, API Security, and Mobile Security
• Working knowledge of cloud security principles in AWS and/or Azure environments
• Proficiency in at least one object-oriented programming language
• Familiarity with CI/CD platforms such as Jenkins or GitLab CI

Preferred Qualifications

• Industry certifications such as CISSP, CISM, CEH, OSCP, CCSK, or CCSP
• Experience with cloud security posture management and container security scanning
• Exposure to secure SDLC programs in large enterprise environments
• Familiarity with emerging areas such as AI/LLM application security
• Experience supporting remediation in hybrid or multi-cloud environments

About the Company

Broadridge is a global technology leader with trusted expertise and transformative technology, helping clients and the financial services industry operate, innovate, and grow. We power investing, governance, and communications for our clients, driving operational resiliency and transforming investor experiences.