We are seeking a skilled and strategic IT Security Architect Engineer to design and implement enterprise-grade security frameworks across our systems, networks, and applications.

This role will play a critical part in proactively identifying and managing risks, ensuring compliance, and leading the organizations cybersecurity posture against emerging threats.

Key Responsibilities :

- Develop and implement robust and scalable security architectures for IT infrastructure, cloud environments, applications, and networks.

- Define secure system configurations and security-by-design principles throughout the development lifecycle.

- Perform risk assessments, penetration tests, and vulnerability scans regularly.

- Collaborate with stakeholders to define mitigation strategies and implement remediations.

- Maintain a continuous security monitoring posture.

- Define and enforce security policies, standards, and procedures in line with industry best practices (e.g., ISO 27001, NIST, CIS).

- Ensure compliance with regulatory frameworks (e.g., GDPR, HIPAA, PCI-DSS, SOC 2).

- Detect, investigate, and respond to security incidents and breaches.

- Develop and maintain incident response plans and conduct tabletop exercises.

- Coordinate with external vendors or legal teams when needed.

- Work closely with development, infrastructure, and DevOps teams to embed security across workflows.

- Conduct security awareness training and educate internal teams on secure practices.

- Monitor trends in cyber threats, attack vectors, and new technologies.

- Research and recommend tools for security automation, monitoring, and threat intelligence.

- Review and refine security architecture based on threat landscape evolution.

Technical Skills Required :

- Strong foundation in network security, application security, and cloud security (AWS/Azure/GCP)

- Experience with firewalls, IDS/IPS, DLP, SIEM tools, endpoint security, and IAM solutions

- Hands-on expertise in threat modeling, encryption standards, and secure coding practices

- Proficient in scripting and automation tools (Python, PowerShell, Bash)

- Familiarity with DevSecOps practices, CI/CD integration, and container security (Docker/Kubernetes)

- Strong knowledge of compliance frameworks like ISO 27001, NIST, OWASP, SOC2, etc.

- Bachelors or Masters degree (B.Tech / M.Tech) in Computer Science, Information Security, or a related field

- Relevant security certifications preferred: CISSP, CISA, CISM, CEH, OSCP, AWS Security Specialty