Security Architect

**Project Role :**Security Architect
**Project Role Description :**Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
**Must have skills :**Industry X Security
**Good to have skills :**NA
Minimum 5 year(s) of experience is required
**Educational Qualification :**15 years full time education

Summary:

As an Application Security Consultant, your typical day involves performing security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud environments, and network infrastructures. You will be responsible for identifying security vulnerabilities, recommending remediation strategies, and implementing robust security controls to protect critical business assets. You will leverage your expertise in application security, threat modeling, security testing methodologies, DevSecOps practices, and security frameworks to enhance the organization''s security posture while supporting clients in managing evolving cyber threats.

Roles & Responsibilities:

Expected to perform independently and become an SME.
Required active participation/contribution in team discussions.
Contribute in providing solutions to work related problems.
Perform security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud platforms, and network environments.
Conduct security research and vulnerability analysis to identify emerging threats and security risks.
Architect, strategize, recommend, and implement application security solutions to address business and technical security requirements.
Perform threat modeling, secure code reviews, vulnerability assessments, reverse engineering, and security testing activities.
Lead solution engineering activities and oversee project delivery for security engagements.
Collaborate with business development and solution engineering teams to translate business opportunities into security solutions and technical requirements.
Support the development of new cybersecurity capabilities, services, frameworks, and offerings.
Assist in presales activities, proposal development, and marketing initiatives related to Application Security, Cloud Security, and Industrial Security services.
Provide guidance and recommendations on secure development lifecycle practices and security best practices.
Work closely with cross-functional teams to integrate security throughout the software development and deployment lifecycle.
Mentor team members and contribute to knowledge-sharing initiatives across the organization.

Professional & Technical Skills:

Must To Have Skills:
Application Security, Web Application Security, Mobile Application Security (Android & iOS), API Security, Cloud Security, Network Security, Vulnerability Assessment and Penetration Testing (VAPT).
Good To Have Skills:Container Security, Embedded Security, IoT/IIoT Security, DevSecOps.
Minimum 6 years of experience in Security Research, Security Consulting, Security Assessments, and Penetration Testing engagements.
Strong expertise in architecting, strategizing, recommending, and implementing security solutions.
Extensive experience with security threats, vulnerability research, and secure software development lifecycle best practices.
Hands-on experience in threat modeling, security code reviews, vulnerability assessments, reverse engineering, exploitation techniques, mitigation development, fuzzing, and penetration testing.
Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Threat Modeling methodologies.
Hands-on experience with industry-standard security testing tools including Burp Suite, Metasploit, Nessus, Fortify SCA, WebInspect, Black Duck, IBM AppScan, Acunetix, Netsparker, Wireshark, Nmap, Drozer, and Kali Linux.
Strong understanding of Windows and Linux operating systems from a security testing perspective.
Experience in programming and scripting languages such as Java, Python, Perl, and Ruby.
Familiarity with DevSecOps practices and CI/CD tools such as Jenkins.
Good exposure to cybersecurity standards and frameworks including PCI DSS, ISO 27001, NIST, OWASP, WASC, HIPAA, SOX, and MITRE ATT&CK Framework.
Ability to lead solution engineering engagements and manage end-to-end security project delivery.
Strong understanding of risk management, security architecture, and secure application development practices.
Mandatory possession of one or more industry-recognized security certifications such as CEH, CHFI, ECSA, OSCP, CISSP, CISO, CISM, CompTIA Security+, or GSEC.

Additional Information:

The candidate should have a minimum of 6 years of experience in Application Security, Security Consulting, and Penetration Testing.
Experience supporting security presales activities, capability development, and cybersecurity service creation will be an added advantage.
Strong written and verbal communication skills are essential.
Demonstrated ability to deliver results while working effectively in cross-functional teams.
Experience in secure software development lifecycle practices and DevSecOps implementation is preferred.
This position is based at multiple locations.
A 15 years full time education is required.

Qualification
15 years full time education