Security Architect (Java & Angular)

Job Title: Security Architect (Java & Angular)

Location:PUNE ONLY

Employment Type: Full-Time

Experience Level: 10+ years (with strong security and development background)

Role Overview

We are seeking a Security Architect who combines deep expertise in application security with hands-on experience in Java and Angular development. This role will design and implement secure-by-design solutions across applications, infrastructure, and cloud environments, ensuring robust security controls are embedded throughout the SDLC and DevSecOps pipelines.

Key Responsibilities

• Security Architecture Design
• Define and implement security architectures for web applications built on Java (Spring Boot) and Angular.
• Establish secure coding standards and patterns for full-stack applications.
• Integrate security controls across application, network, and cloud layers (AWS/Azure/GCP).
• Secure SDLC & DevSecOps
• Embed security testing (SAST, DAST, SCA) into CI/CD pipelines.
• Guide developers on secure coding practices for Java and Angular frameworks.
• Automate vulnerability scanning and compliance checks.
• Threat Modeling & Risk Assessment
• Perform threat modeling (STRIDE) and identify risks in application design.
• Map risks to OWASP Top 10 and CVSS scoring for prioritization.
• Vulnerability Management & Penetration Testing
• Conduct and oversee vulnerability assessments and penetration tests for web and API endpoints.
• Provide remediation guidance for identified issues.
• Compliance & Governance
• Ensure adherence to ISO 27001, SOC 2, PCI-DSS, and GDPR requirements.
• Maintain documentation for audits and regulatory compliance.
• Stakeholder Engagement
• Act as a security advisor to development teams, product owners, and business stakeholders.
• Deliver security awareness sessions and technical workshops.

Required Skills & Competencies

• Technical Expertise
• Strong proficiency in Java (Spring Boot) and Angular development.
• Deep understanding of application security principles, OWASP Top 10, and secure coding practices.
• Experience with SAST/DAST tools(Checkmarx, Fortify, Burp Suite).
• Familiarity with container security(Docker/Kubernetes) and cloud security (AWS).
• Knowledge of IAM, encryption, and key management.
• Security Frameworks & Standards
• ISO 27001, SOC 2, PCI-DSS, GDPR compliance experience.
• Threat modeling methodologies (STRIDE, PASTA).
• Soft Skills
• Strong communication and documentation skills.
• Ability to influence and guide cross-functional teams.