Security Architect

Project Role :Security Architect

Project Role Description :Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills :Static Application Security Testing (SAST)
Good to have skills :NA
Minimum 5 year(s) of experience is required
Educational Qualification :Bachelor or college degree in related field or equivalent work experience
Summary:As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. You will document the implementation of the cloud security controls and transition to cloud security-managed operations. Your typical day will involve designing and implementing security solutions, collaborating with cross-functional teams, and ensuring the integrity and confidentiality of data in the cloud environment.
Roles & Responsibilities:-SAST Implementation:Configure, deploy, and manage static application security testing tools to analyze source code for vulnerabilities. Ensure tools are effectively integrated into the development and CI/CD pipelines.Vulnerability Assessment:Conduct thorough assessments of application source code and binaries to identify security vulnerabilities. Analyze scan results to determine the severity and impact of identified issues.Remediation Guidance:Provide actionable recommendations and guidance to development teams on how to remediate identified vulnerabilities. Collaborate with developers to implement security fixes and validate their effectiveness.Security Standards and Policies:Develop, update, and enforce security standards and best practices for application development. Ensure compliance with industry standards and regulatory requirements.Continuous Improvement:Monitor and assess the effectiveness of the SAST process and tools. Identify opportunities for improvement and implement enhancements to improve detection capabilities and reduce false positives.Reporting and Documentation:Prepare detailed reports on security findings, remediation status, and overall application security posture. Maintain comprehensive documentation of security assessments, processes, and procedures.Training and Awareness:Conduct training sessions and workshops for development teams on secure coding practices and the use of SAST tools. Promote a culture of security awareness within the organization.Collaboration:Work closely with cross-functional teams, including developers, DevOps, and security operations, to integrate security testing seamlessly into the development workflow.
Professional & Technical Skills:

Must To Have Skills:Proficiency in Static Application Security Testing (SAST).

Experience with cloud security frameworks and architectures.

Strong understanding of security principles and best practices.

Knowledge of cloud platforms and services (e.g., AWS, Azure, GCP).

Experience with security tools and technologies (e.g., SIEM, IDS/IPS, WAF).

Good To Have Skills:Experience with DevSecOps practices.

Familiarity with secure coding practices and vulnerability management.

Experience with threat modeling and risk assessment methodologies.
Additional Information:

The candidate should have a minimum of 5 years of experience in Static Application Security Testing (SAST).

This position is based at our Bengaluru office.

A Bachelor or college degree in a related field or equivalent work experience is required.

 Qualifications 
Bachelor or college degree in related field or equivalent work experience