Description :

Introduction :

We are seeking a highly skilled Security Architect to join our dynamic team. The ideal candidate will have a deep understanding of various security frameworks, threat modelling, and the ability to perform in-depth security assessments across web applications, cloud environments, and network infrastructures. You will be responsible for designing and implementing security solutions to protect against threats and vulnerabilities, ensuring the integrity and safety of critical systems.

As a Security Architect, you will work closely with both technical and non-technical stakeholders to ensure effective communication of security risks and the implementation of appropriate mitigations.

Key Responsibilities :

- Web Application Testing & Security : Lead web application security testing efforts, identifying and mitigating vulnerabilities in web applications and APIs.

- AI/ML Security Assessment : Conduct security assessments of AI/ML applications, ensuring the models and data are protected from adversarial attacks and unauthorized access.

- Vulnerability Assessment and Penetration Testing (VAPT) : Perform VAPT to identify security weaknesses and threats in applications, networks, and systems.

- Vulnerability Management : Oversee vulnerability management programs, ensuring timely remediation and risk prioritization.

- Cloud Security : Design and implement cloud security solutions across multi-cloud environments (AWS, Azure, GCP), focusing on secure cloud architecture, data protection, and compliance.

- Container Security : Manage Docker container security by implementing security controls, performing container vulnerability scanning, and securing containerized applications.

- Static and Dynamic Application Security Testing (SAST/DAST/IAST) : Utilize tools like Trivy, AppScan, Snyk, and other scanning tools for SAST, DAST, and IAST assessments.

- Threat Modelling : Lead threat modelling sessions to proactively identify and address potential vulnerabilities in system designs and applications.

- Security Communication : Provide clear explanations of technical vulnerabilities to both technical and non-technical stakeholders.

- Standards and Frameworks : Ensure compliance with industry standards and frameworks such as ISO27001, NIST, and others.

- Network Security : Design and implement network security controls to protect against external and internal threats.

- Red Teaming : Engage in red teaming exercises, simulating real-world attacks to test the effectiveness of security controls.

- Zero Trust Architecture : Implement and enforce Zero Trust principles within the organization, focusing on identity and access management (IAM) and data protection.

- CI/CD Security Integration : Ensure security is integrated throughout CI/CD pipeline, including automated security testing and vulnerability scans during deployment process.

- System Design : Collaborate with engineering teams to design and implement secure, scalable systems with robust security controls from the ground up.

- Firewall Configuration and Management : Oversee firewall configurations and rule-set management, ensuring robust perimeter defenses.

Additional Skills (Nice to Have) :

- Certifications : Certifications such as CISSP, CISM, CCSP, or other relevant security certifications will be considered an advantage.

- Incident Response Planning : Experience in developing and executing incident response plans and playbooks.

- SIEM Understanding : Knowledge of Security Information and Event Management (SIEM) systems and their implementation.

- Forensics & Active Directory : Familiarity with digital forensics, incident investigation, and security monitoring, including Active Directory security best practices.

- Problem Solving : Ability to think critically and strategically to solve complex security issues.

Qualifications :

Education : Bachelor's or Masters degree in Computer Science, Cybersecurity, Information Technology, or a related field.

Experience : Minimum of 10 years of hands-on experience in security architecture, web application security, cloud security, and vulnerability management.