Security Architect (Engineering) (ID 1352)
Posted
Summary
Security architect role in Noida defining enterprise-wide security architecture: driving secure SDLC practices (threat modeling, SAST/DAST, supply-chain security), secure cloud-native design on AWS/Azure, Kubernetes and network baselines, and compliance with frameworks like ISO 27001, SOC 2, and PCI-DSS, with preferred AI/LLM security exposure.
• Define and maintain enterprise-wide security architecture principles, standards, and best practices.
• Review and approve application, platform, cloud, and infrastructure designs from a security
perspective.
• Establish secure-by-design and secure-by-default engineering practices.
• Develop and maintain security reference architectures, patterns, and reusable controls
• Drive security throughout the Software Development Lifecycle (SDLC).
• Define and implement secure coding standards and security guardrails.
• Lead threat modeling exercises for critical applications and platforms.
• Oversee SAST, DAST, dependency scanning, container scanning, and software supply chain security
initiatives.
• Partner with development teams to remediate vulnerabilities and security findings.
• Review APIs, microservices, authentication mechanisms, and data protection strategies.
• Partner with Infrastructure and Cloud teams to design secure cloud-native architectures.
• Drive implementation of security controls across AWS, Azure, and hybrid environments.
• Review network architecture, IAM, WAF, load balancers, VPNs, firewalls, and segmentation strategies.
• Establish security baselines for servers, containers, Kubernetes clusters, and cloud services.
• Ensure compliance with security policies, standards, and regulatory requirements.
Requirements
• 8–10+ years of experience in Information Security, Security Architecture, Application Security, or Cloud
Security.
• Strong hands-on experience with both Application Security and Infrastructure Security.
• Deep understanding of secure software development practices.
• Experience securing cloud environments such as AWS and/or Azure.
• Experience implementing security controls in CI/CD pipelines.
• Ability to perform threat modeling and security architecture reviews.
• Strong stakeholder management and influencing skills.
• Security certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer,
TOGAF, or equivalent.
• Experience in highly regulated environments.
• Experience establishing security programs within engineering organizations.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, NIST, or CIS Controls.
• Exposure to Generative AI, Large Language Models (LLMs), Agentic AI frameworks, or intelligent
automation platforms.
• Understanding of AI security concepts including model security, prompt injection risks, data
governance, and AI risk management.
• Familiarity with emerging AI governance and security frameworks.
