Role: Security Architect- Security Assessments
Experience: 9-17 Years
Skills: Security assessments (cloud/app/vendor), threat modelling, secure SDLC, risk analysis, Vendor risk management, KPIs/KRIs, automation, compliance frameworks (NIST/PCI), architecture standards
Skills and Qualifications
Required:
- 9+ years of experience in information security, security architecture, or security engineering roles.
- Proven experience acting as a technical lead or senior individual contributor within security assessment or architecture functions.
- Strong understanding of security architecture principles across applications, infrastructure, cloud, and integrations.
- Hands-on experience conducting application, cloud, and third-party/vendor security assessments.
- Deep knowledge of cloud security concepts including IAM, networking, encryption, containers, serverless, and data protection.
- Experience with secure SDLC practices, CI/CD pipelines, application security testing, and code management.
- Familiarity with security and compliance frameworks such as NIST, PCI, and industry best practices.
- Working knowledge of network security, web application security, and modern authentication technologies.
- Experience using industry-standard security scanning and assessment tools.
- Ability to contextualize technical findings into business risk and remediation guidance.
- Strong analytical, leadership, and stakeholder communication skills.
Preferred:
- Bachelor's degree in computer science, Cybersecurity, Engineering, or equivalent experience.
- Experience with formal vendor risk management programs or assessment platforms.
- Basic scripting or automation experience (e.g., Python) to support assessment workflows.
- Experience working with globally distributed teams.
- Security certifications such as CISSP, CCSP, or CISM.