Security Architect (10-15 yrs)

Job Description :

What You Will Need :

- At least 10 years of relevant security experience

- Strong acumen and understanding of tech architecture for cloud-native and microservices based web and mobile applications

- Ability to drive security automation and DevSecOps within engineering life cycle, as well as vulnerability/bug remediation through calibration and filtering false positives

- Experience in using manual and automated scanners like Nessus, Nexpose, Qualysguard, nmap, OpenVAS, Nexpose, and PT kits like Kali Linux, Metasploit, Accunetix, Burrp

- In-depth understanding of at least 3 security domains: application, network, identity access management, vulnerability management, incident response, encryption, remote access

- Mandatory certification : CISSP / OSCP / CEH

- Desirable certifications : CSSLP, LPT, SANS-GPEN, SABSA

- Has deployed tools like Fortify for SAST, OWASP ZAP Proxy for DAST, Dependabot/Xray Jfrog for SCA/Trivy

- Worked on STRIDE threat modeling

- Good knowledge on PII/SPII

- GDPR/PCI-DSS/PA-DSS certification

- Good knowledge on card industry/Payment domain certification and the applicable security models

What You Will Do :

- Participate in the development of a small to medium complexity security project, process, or initiative within your technical focus area (i.e. cloud security, identity access management, vulnerability management, penetration testing)

- Design, develop, and maintain small to medium complexity security features and/or process changes and incorporate them into main product

- Plan activities from functional security assignments in consultation with product owner

- Improve security operations by enhancing use cases, processes, and/or code structure

- Implement medium complexity security tasks for projects and delivers concise and clear deliverables

- Contribute to automation of security testing using latest tools be it from OS/Infra/MessageQueues/DB/Applications

- Collaborate in security reviews that follow the standards and practices of information security best practices recognized by your team members