Security Architect Application Security - SSDLC

Responsibilities:

• Act as Subject Matter Expert (SME) for Application, Product, and Platform Security and define security blueprints.
• Collaborate with Business Analysts, Solution Architects, and Software Development Managers to embed security controls into NFRs, system design, development, and implementation.
• Translate business and compliance requirements into security requirements.
• Evaluate Solution Architecture designs for security flaws and gaps.
• Define security architecture blueprints, patterns, and frameworks.
• Conduct Threat Modeling workshops during initial design phases.
• Work with the SSDLC team to validate that implemented code aligns with the intended security architecture.
• Assess third-party libraries, APIs, interconnections, and infrastructure for systemic risks.
• Develop architecture and blueprints for Cyber Security solutions.
• Assess security, privacy, and compliance risks related to AI and emerging technologies/platforms.
• Develop Microservices and API Security Architecture.
• Drive DevSecOps integration and automation with DevOps teams.
• Drive implementation and integration of SCA, SAST, DAST, and IAST tools for Application Security Testing.
• Review and enhance security posture across Network, Infrastructure, and Application layers.
• Prepare weekly/monthly service delivery reports and review them with BU Head and VH.
• Advise on Secure Coding best practices and conduct Application Security training for teams and developers.
• Participate in and support internal and external security audits.
• Participate in Security Risk Assessments and Audits and facilitate interdisciplinary knowledge sharing.
• Review the effectiveness of technical security controls and prepare risk dashboards.
• Collaborate with internal and external stakeholders for timely delivery of projects and engagements.
• Review project status and implement approved corrective and preventive measures.
• Provide service delivery inputs to PMO and relevant systems.
• Provide SME guidance on security tool capabilities and configuration adjustments to contain incidents or prevent future attacks.
• Participate in continual improvement and benchmarking activities.
• Contribute to CoE initiatives and other activities assigned by the BU Head or Vertical Head.

Requirements:

• Excellent written and verbal communication skills in English.
• High integrity, strong work ethic, and ability to empathize with customers.
• At least 8 years of Cyber Security experience with 3+ years specifically in Security Architecture in a large organization, bank, global IT, or consulting firm.
• Strong background in Application Security and Secure Software Development Lifecycle (SSDLC).
• Experience in Threat Modelling, Application Architecture Review, Security Architecture Documentation, SCA, SAST, and DAST.
• Exposure to security tools integration in DevOps architecture.
• Exposure to Microservices Security, API Security, and AI Security.
• Experience in evaluation and implementation of Application Security and Testing tools.
• Strong troubleshooting, problem-solving, analytical thinking, and attention to detail.
• Good understanding of Application Security Standards such as OWASP, SANS, NIST, and MITRE.
• Good understanding of Security by Design and Privacy by Design principles.
• Good understanding of privacy compliance requirements and privacy controls at application and database layers.
• Good understanding of compliance requirements for payment and non-payment applications.
• Exposure to Product and Platform Security Assessment is desirable.
• Understanding of Load Balancer, WAF, CDN, API Gateway, and Secrets Management.
• Exposure to Cloud Application / SaaS Security Solutions is desirable.
• Good understanding of Encryption, SSL, Key Management, HSM, PKI Infrastructure, and Secrets Management.
• Ability to assess solutions and recommend proactive measures to mitigate Network, OS, and Application Layer Security attacks.