{"id":2114607,"url":"https://alion.io/job/volvo-group-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":21055,"name":"Volvo Group","domain":"volvogroup.com","url":"https://alion.io/company/volvo-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":18500,"max_usd":39000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-13T05:37:35Z","board_verified":false,"closed_at":null,"days_open":10,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":10},"description":"Transport is at the core of modern society. Imagine using your expertise to shape sustainable transport and infrastructure solutions for the future. If you seek to make a difference on a global scale, working with next-gen technologies and the sharpest collaborative teams, then we could be a perfect match.\nRole Purpose\nThe Application Security Engineer is responsible for building, evolving, and scaling the organization’s third-party and software supply chain security capabilities across Volvo Group.\nThis role contributes directly to the development of governance models, operating frameworks, risk methodologies, and enablement structures that allow Stable Teams to securely consume third-party software, SaaS services, APIs, open-source components, and external technology providers.\nThe focus of the role is capability building: designing how supply chain and third-party security is governed, understood, and adopted across the organization, and enabling its execution through guidance, education, and scalable frameworks.\nMission\nDevelop and mature enterprise-wide capabilities for third-party and supply chain security by translating governance and risk objectives into scalable frameworks, practical guidance, and structured enablement models.\nEnable Stable Teams to make informed, risk-based decisions when consuming external software and services, while continuously improving the organization’s ability to govern, assess, and manage third-party and supply chain risks.\nKey Accountabilities\nCapability Building - Third-Party & Supply Chain Security Governance\nContribute to the design, development, and evolution of third-party and supply chain security governance capabilities.\nHelp define scalable operating models, frameworks, and standards for managing external software and supplier risk.\nDevelop and refine tiered risk models and governance structures for third-party and supply chain security.\nEnsure governance capabilities are practical, adoptable, and aligned with how Stable Teams consume external technology.\nCapability Enablement for Stable Teams\nBuild enablement structures that allow Stable Teams to understand and apply third-party and supply chain security requirements.\nDevelop playbooks, and decision frameworks for managing external software and vendor risk.\nDesign and deliver workshops and enablement programs that build organizational capability in supply chain security.\nEnable teams to make consistent, risk-informed decisions when adopting third-party software and services.\nSecurity Maturity & Capability Progression\nDesign and evolve maturity models specifically for third-party and supply chain security capabilities.\nDefine what “good” looks like across different maturity levels in managing external dependencies and supplier risk.\nDevelop structured maturity assessment approaches and capability roadmaps.\nIdentify gaps in organizational capability and define initiatives to close them at scale.\nSupport progression from ad-hoc third-party risk handling to structured, repeatable governance capabilities.\nMetrics, Insights & Capability Measurement\nDefine metrics that measure maturity and effectiveness of third-party and supply chain security capabilities.\nDevelop indicators for capability adoption, governance effectiveness, and risk reduction across external dependencies.\nAnalyze trends to identify where capability gaps exist and where governance improvements are needed.\nProvide insights that guide the evolution of supply chain security capabilities over time.\nEcosystem Capability Integration\nCollaborate with application security team to embed supply chain security capabilities into tooling, automation, and workflows.\nContribute to defining scalable patterns for secure consumption of third-party components within delivery pipelines.\nSupport the evolution of “Golden Path” for safe and standardized use of external software and services.\nAdvisory & Influence\nProvide expert input into third-party and supply chain security decisions across DV/BA/GF.\nInfluence adoption of governance models and security practices through guidance and early engagement.\nTranslate complex supply chain risk concepts into understandable and actionable guidance for Stable Teams.\nStay current on emerging supply chain threats and ensure they are reflected in capability evolution.\nExpected Outcomes\nCapability Development Ownership\nOwns and contributes to the development of enterprise capabilities for third-party and supply chain security.\nSupports the evolution of governance models, operating structures, and maturity frameworks.\nEnsure capabilities are scalable, reusable, and aligned with organizational technology consumption patterns.\nIdentifies opportunities to improve or introduce new capabilities in response to emerging risks and business needs.\nStakeholder Engagement\nWorks closely with Stable Teams, Digital Product Owners (DPOs), Procurement, Vendor Management, Architecture, and Security Governance stakeholders.\nActs as a bridge between governance design and real-world adoption of third-party security capabilities.\nBuild strong relationships to ensure capability adoption and long-term sustainability.\nSecurity Domains\nResponsible for capability development and enablement across:\nThird-Party Risk Management Capability\nSoftware Supply Chain Security Capability\nVendor & SaaS Security Governance\nExternal API & Integration Security\nOpen Source & Dependency Risk Management\nSecurity Maturity Frameworks (Third-Party Focus)\nSecurity Governance Operating Models\nSecurity Enablement & Education Systems\nRisk Metrics & Capability Measurement\nQualifications\n10+ years of experience in cybersecurity, with a strong focus on third-party security, supply chain security, or technology risk.\nExperience developing or improving security capabilities, frameworks, standards, processes, or guidance for third-party and supply chain security.\nGood understanding of risks related to suppliers, SaaS providers, external services, open-source software, and third-party components.\nExperience performing or supporting third-party security assessments and helping teams make risk-based decisions.\nExperience working with stakeholders such as Procurement, Legal, Vendor Management, Digital Product Owners, engineering teams, and security functions.\nAbility to turn security requirements into clear and usable ways of working for teams across the organization.\nStrong communication and influencing skills, with the ability to explain security risks and requirements in a simple and practical way.\nAbility to identify capability gaps, propose improvements, and help drive security maturity across a large organization.\nReady for the next move?\nAre you excited to bring your skills and disruptive ideas to the table? We can’t wait to hear from you. Apply today!\nAt Volvo Group, we believe in the value of in-person collaboration and connection. Our general principle is that employees work from the office.\nVolvo Group never requests any form of payment or fees from candidates at any stage of the recruitment process. Any such demand is a scam. To view the authentic job description and apply securely, please visit: Jobs at Volvo Group\nWe value your data privacy and therefore do not accept applications via mail.\nWho we are and what we believe in\nWe are committed to shaping the future landscape of efficient, safe, and sustainable transport solutions. Fulfilling our mission creates countless career opportunities for talents across the group’s leading brands and entities.\nApplying to this job offers you the opportunity to join Volvo Group. Every day, you will be working with some of the sharpest and most creative brains in our field to be able to leave our society in better shape for the next generation. We are passionate about what we do, and we thrive on teamwork. We are almost 100,000 people united around the world by a culture of care, inclusiveness, and empowerment.\nVolvo Group Digital Technology & Operations (DTO) is a new division. The organizational set up is structured around domains, digital products with functions for digital excellence to deliver outstanding customer experience.\nJoining the new DTO division means being part of a fast-moving digital product-oriented organization where teams truly own what they build from idea to delivery. In DTO, we work in agile, cross-functional teams, mastering the latest technology, and creating outstanding digital experiences that make a real difference for our colleagues and Volvo Group customers around the world. We put people first and build our culture on trust, passion, customer success, change, and performance. If you want to grow, collaborate across functions and entities, and help shape the future of digital products within Volvo Group, DTO is a great place to be.\nIn some countries and for specific positions within Volvo Group Digital Technology & Operations, background checks (verification of selected information provided by the candidate) may be required, in accordance with local laws & regulations. If this is applicable to the role you have applied for, you will be informed.","description_format":"text","description_chars":9106,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-08T23:15:11Z"}],"visa":[],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":0.9,"p_active":0.801,"p_room":0.9,"age_days":10,"expected_fill_days":15,"reasons":["conf:48","velocity","win:mid","comp:brand"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/volvo-group-senior-application-security-engineer","json_url":"https://alion.io/job/volvo-group-senior-application-security-engineer.json","meta":{"generated_at":"2026-10-15T22:22:12Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33941,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":21055},"rest":"https://alion.io/mcp/rest/get_company?id=21055"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvolvo-group-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvolvo-group-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvolvo-group-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/volvo-group-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvolvo-group-senior-application-security-engineer"}]}