Search by job, company or skills

Vulnerability Security Architect

Vulnerability Security Architect

zettamine labs pvt. ltd.
9-17 Years
Not Disclosed
  • Posted an hour ago
  • Be among the first 10 applicants

Job Description

Hello,

Greetings from ZettaMine!!

Job Title: Vulnerability Security Architect

Job Location: | Pune | Bangalore | Hyderabad | Chennai

Experience Required: 9-17 Years

Vulnerability Security Architect

Key responsibilities

  • Define disposition taxonomy, threat-model attributes, evidence standards, confidence rules, review thresholds and escalation criteria.
  • Approve reusable decision patterns and applicability constraints; prevent project-specific assumptions from propagating beyond valid boundaries.
  • Adjudicate ambiguous or high-impact cases and define evidence-preserving handoffs to the separate exploit-research capability.
  • Govern the golden dataset, quality sampling, disagreement analysis, decision drift and corrective action across workstreams.
  • Partner with the Engineering Lead so automation is explainable, measurable, reversible and faithful to security policy.

Mandatory requirements

  • Senior product security, application security or vulnerability research experience with substantial hands-on source-code assessment.
  • Deep knowledge of threat modeling, reachability, attacker influence, exploit preconditions, vulnerability classes, severity and compensating controls.
  • Depth in at least one core runtime and the ability to review reasoning across a heterogeneous C/C++, Java/JVM, Go, Python and JavaScript/TypeScript portfolio.
  • Experience designing triage policy, reusable-decision governance, reviewer calibration and defensible technical records at scale.

LANGUAGE AND RUNTIME REQUIREMENT

Deep expertise in one runtime is required; broad review competence and access to specialists matter more than claiming mastery of every ecosystem. The architect must recognize when runtime-specific review is necessary.

Relevant tools and environments

Fortify or comparable SAST output; Git and code search; CodeQL/Semgrep-style data-flow analysis; CWE/CVSS and OSS advisory data; build metadata, debuggers and evidence systems as relevant.

Interested can reach out at: [Confidential Information] and what app or Call: 8977781934

Regards,

Swetha.P

More Info

Job Type:
Industry:
Function:
Employment Type:

Key Skills

source-code assessment

CVSS

CWE

CodeQL

OSS advisory data

Semgrep