Security Architect For Application Security SSDLC
Posted Updated
Summary
Application security architect (8-12 yrs) in Mumbai on a 5-year fixed-term contract serving ReBIT exclusively. Drives SSDLC across projects — threat modeling, architecture reviews, SAST/DAST/SCA/IAST testing, DevSecOps automation in CI/CD — and leads a small appsec team.
Experience & Qualifications
Key Responsibilities
Certifications (Preferred)
Employment Details
- 8-12 years of Cyber Security experience in large organizations, banks, or global IT/consulting firms
- Strong background in Application Security & Secure SDLC (SSDLC)
- Experience in:
- Threat Modeling
- Application Security Architecture Review
- Security Testing: SCA, SAST, DAST, IAST
- Exposure to DevSecOps integration and security tools in CI/CD pipelines
- Knowledge of Microservices & API Security
- Understanding of Owasp, SANS, NIST security standards
- Familiarity with Security by Design & Privacy by Design
- Exposure to Cloud Security (SaaS) and platform security
- Knowledge of Load Balancer, WAF, CDN, API Gateway, Secrets Management
- Strong understanding of encryption technologies (SSL, PKI, HSM, Key Management)
- Strong analytical, troubleshooting, and problem-solving skills
Key Responsibilities
- Act as SME for Application & Product Security
- Drive SSDLC implementation across projects end-to-end
- Conduct:
- Architecture Reviews
- Security Testing (SCA, SAST, DAST, IAST)
- Implement and manage application security tools
- Define secure coding practices and conduct developer trainings
- Lead and manage a small Application Security team
- Work on DevSecOps automation and integration
- Perform risk assessments, audits, and compliance reviews
- Prepare risk registers, dashboards, and reports
- Collaborate with internal and external stakeholders
- Provide inputs for product/platform security enhancements
- Drive continuous improvement and CoE initiatives
Certifications (Preferred)
- ISO 27001, cissp, CISA, csslp, CEH
- C|ase, CSSD, GWEB, cmwpt, GPEN
- API Security Architect or equivalent
Employment Details
- Full-time Fixed-Term Contract (5 years)
- Extendable based on mutual consent
- Exclusive to ReBIT