Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Industry X Security
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:

As an Application Security Analyst, your typical day involves performing security assessments, vulnerability assessments, and penetration testing across web applications, mobile applications, APIs, cloud environments, and network infrastructures. You will identify security weaknesses, conduct threat analysis, and recommend remediation measures to strengthen the security posture of applications and systems. You will work closely with development, operations, and security teams to integrate security best practices throughout the software development lifecycle while helping protect critical business assets from emerging cyber threats.

Roles & Responsibilities:

Expected to perform independently and become an SME.
Required active participation/contribution in team discussions.
Contribute in providing solutions to work related problems.
Perform vulnerability assessments and penetration testing across web applications, mobile applications (Android and iOS), APIs, cloud platforms, and network environments.
Conduct security research and vulnerability analysis to identify and assess emerging threats and risks.
Perform threat modeling, security code reviews, vulnerability assessments, and security testing activities.
Identify, validate, and document security vulnerabilities along with remediation recommendations.
Support the implementation of secure software development lifecycle (SSDLC) practices across projects.
Collaborate with development and operations teams to integrate security into DevSecOps and CI/CD processes.
Utilize industry-standard security tools to perform comprehensive security assessments and penetration testing.
Support risk assessments and security reviews to improve application and infrastructure security posture.
Work with cross-functional teams to address security findings and implement corrective measures.
Contribute to security knowledge sharing and continuous improvement initiatives within the team.

Professional & Technical Skills:

Must To Have Skills: Application Security, Web Application Security, Mobile Application Security (Android & iOS), API Security, Cloud Security, Network Security, Vulnerability Assessment and Penetration Testing (VAPT).
Good To Have Skills: Container Security, Embedded Security, IoT/IIoT Security, DevSecOps.
Minimum 4 years of experience in Security Research, Security Consulting, Security Assessments, and Penetration Testing.
Strong understanding of security threats, vulnerability research, and secure software development lifecycle best practices.
Experience in threat modeling, security code review, vulnerability assessment, reverse engineering concepts, exploitation techniques, and mitigation strategies.
Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Threat Modeling methodologies.
Proficiency with industry-standard security assessment and penetration testing tools including Burp Suite, Metasploit, Nessus, Fortify SCA, WebInspect, Black Duck, IBM AppScan, Acunetix, Netsparker, Wireshark, Nmap, Drozer, and Kali Linux.
Experience working in Windows and Linux environments.
Familiarity with DevSecOps practices and CI/CD tools such as Jenkins.
Good knowledge of cybersecurity standards and frameworks including PCI DSS, ISO 27001, NIST, OWASP, WASC, HIPAA, SOX, and MITRE ATT&CK Framework.
Understanding of secure coding practices, application security testing methodologies, and vulnerability management processes.
Possession of security certifications such as CEH, CHFI, ECSA, OSCP, CISSP, CISO, CISM, CompTIA Security+, or GSEC is preferred.

Additional Information:

The candidate should have a minimum of 4 years of experience in Application Security and Vulnerability Assessment & Penetration Testing.
Experience in web, mobile, API, cloud, and network security assessments is required.
Knowledge of DevSecOps practices and secure software development lifecycle processes is preferred.
Strong written and verbal communication skills are essential.
Demonstrated ability to deliver results while working effectively in cross-functional teams.
This position is based at multiple locations.
A 15 years full time education is required.