Security Architect
Job Description
- Experience: 9-12 years
- Location—Pune
Must-Have Skills:
- Security Architecture / Enterprise Security Architecture
- Web & Mobile Application Security – hands-on
- Threat Modelling & Security Risk Assessment
- Cloud Security – AWS/Azure/GCP
- IAM / Identity & Access Management
- Application & Network Security
- Secure SDLC / DevSecOps
- ISO 27001, NIST CSF, CIS Controls
- Security Governance & Architecture Reviews
- Strong stakeholder management & communication
Security Architect + Web/Mobile Security + Threat Modelling + Cloud Security + ISO 27001/NIST.
Who you are
- Experienced in conducting web and mobile application security assessments.
- Demonstrated success in a Security Architect role with responsibility for enterprise security architecture.
- Strong understanding of security frameworks and standards, including ISO 27001, NIST CSF, CIS Controls, and relevant regulatory requirements.
- Skilled in security architecture reviews, threat modelling, and security risk management.
- Knowledgeable across cloud security, identity and access management, network security, application security, and security monitoring capabilities.
- Experienced in developing security standards, reference architectures, and governance frameworks.
- Comfortable influencing diverse stakeholders and communicating effectively across business and technology teams.
- Excellent communication, collaboration, and stakeholder management skills.
More Info
Key Skills
Web Mobile Application Security
Threat Modelling
NIST CSF
CIS Controls
Enterprise Security Architecture
Security Risk Assessment
Application Network Security
About Company
Skills:
Cloud security principles and frameworks, security architecture design, Compliance standards and regulatory requirements, Security policies and procedures, Governance Risk Compliance GRC Tools
Skills:
Identity And Access Management, Proxies, Dns, routing, Zscaler Private Access, Zscaler Internet Access, secure web gateways, network security fundamentals, firewall concepts, zero trust security principles, cloud access security concepts
Skills:
threat modeling , Pki, Jwt, Authentication, Vulnerability Management, Microservices, DevSecOps, Apis, federated identity solutions, container security, trust federation architectures, Zero Trust security architectures, infrastructure hardening, security governance, privileged access controls, secrets management, cloud platform security, mTLS, risk assessments, workload identity, Security Monitoring, compliance frameworks, Kubernetes security, credential lifecycle management, Authorization
Skills:
secure sdlc , Ccsp, Gdpr, Cloud security, API security, Gcp, Togaf, Application Security, Azure, Kubernetes, Cism, AWS, Zero Trust architecture, Cryptographic architecture, Software supply chain protection, Security Architecture, Identity-centric security models, Cissp, Data protection principles, Threat modelling, Risk management