Cyber Security Architect

We have an opening for a Cybersecurity Architect in Bangalore.

Position Overview :

We are seeking an experienced Cybersecurity Architect to design, implement, and govern enterprise-grade security architectures across cloud environments, applications, products, and infrastructure. The ideal candidate will drive secure-by-design principles, strengthen product security, lead threat modeling and risk assessments, and integrate security controls throughout the Software Development Lifecycle (SDLC).

The role requires close collaboration with product engineering, cloud engineering, DevOps, compliance, and business leadership to align security initiatives with organizational objectives and regulatory requirements.

Key Responsibilities :

1. Security Architecture & Strategy :

• Design and implement enterprise security architectures across cloud, applications, products, and infrastructure.
• Define security standards, architecture principles, reference designs, and technical security roadmaps.
• Conduct security architecture reviews and ensure security is integrated into product design and development.
• Align security strategies with enterprise risk management and business objectives.

2. Product Security & Secure SDLC :

• Lead Secure Software Development Lifecycle (SSDLC) and DevSecOps initiatives across engineering teams.
• Integrate automated security testing and controls into CI/CD pipelines.
• Conduct secure design reviews, source code reviews, penetration testing, and vulnerability assessments.
• Establish software supply chain security practices, including third-party dependency and open-source component management.

3. Threat Modeling & Risk Assessment :

• Perform threat modeling, architecture risk assessments, and security design reviews.
• Identify vulnerabilities, attack paths, and security gaps; recommend appropriate mitigation strategies.
• Apply threat intelligence, adversary simulation, and risk-based security assessment methodologies.
• Translate technical security risks into actionable recommendations for engineering and executive stakeholders.

4. Cloud & Infrastructure Security :

• Design and implement security controls across AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Define security requirements for IAM, encryption, network segmentation, infrastructure hardening, and cloud workloads.
• Evaluate cloud security configurations and develop remediation roadmaps.
• Strengthen infrastructure and application security through secure architecture patterns and automated controls.

5. Security Governance & Compliance :

• Establish security policies, standards, procedures, and governance frameworks.
• Ensure alignment with applicable regulatory and industry requirements, including GDPR, PCI-DSS, NIST, ISO 27001, and SOC 2.
• Support enterprise risk management, security audits, compliance assessments, and third-party security reviews.
• Evaluate security technologies and vendors to improve organizational security maturity.

6. Leadership & Collaboration :

• Partner with product leaders, engineering teams, cloud architects, and executive stakeholders.
• Lead security initiatives across multiple products and engineering teams.
• Mentor security engineers and guide teams on secure coding, architecture, and vulnerability remediation.
• Track security metrics and communicate security posture, risks, and improvement plans to leadership.

Required Qualifications :

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline.
• 10+ years of experience in cybersecurity, information security, product security, or security engineering.
• Strong experience in security architecture, application security, cloud security, or enterprise security design.
• Proven experience in threat modeling, architecture risk assessments, and secure design reviews.
• Hands-on experience with SSDLC, DevSecOps, CI/CD security controls, SAST, DAST, and penetration testing.
• Strong understanding of cloud security, IAM, encryption, network security, and vulnerability management.
• Experience with security governance, regulatory compliance, and enterprise risk management.
• Excellent stakeholder management, communication, and technical leadership skills.

Technical Skills :

• Security Architecture: Enterprise Security Architecture, Product Security, Secure-by-Design, Security Assessments.
• Application Security: SSDLC, SAST, DAST, API Security, Secure Code Review, Penetration Testing.
• Cloud Security: AWS, Azure, GCP, Cloud IAM, Encryption, Network Segmentation.
• Threat & Risk: Threat Modeling, Risk Assessment, Red Teaming, Vulnerability Management.
• Security Technologies: WAF, SIEM, EDR/XDR, DLP, IAM, CASB, Security Automation.
• Governance: GDPR, PCI-DSS, NIST, ISO 27001, SOC 2, Enterprise Risk Management.
• DevSecOps: CI/CD Security, Automated Security Testing, Software Supply Chain Security.

Preferred Certifications :

• CISSP
• CCSP
• CISM
• CEH / ECSA or equivalent offensive security certifications