Cloud Security Architect

Huron; Bengaluru; Hybrid; INR 3,000,000 - 6,000,000; Full time

Job summary

Huron is seeking a senior security architect to design and validate secure architectures across cloud and hybrid environments. You will lead security architecture assessments, identify threats, and influence the organization’s security posture.

The role is internally facing and requires collaboration with stakeholders across IT and business units. Ideal candidates bring 13+ years of hands-on security experience, including 3+ years in security architecture, with deep AWS knowledge (ECS/ECR,

Qualifications

• Bachelor's degree or equivalent in CS, Cyber Security, Information Systems, or a related field.

Responsibilities

• Lead security architecture assessments for new and existing applications, systems and integrations.
• Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that consider data protection, access control, and segmentation.
• Assess and validate security requirements based on capabilities and risks of new and emerging information technologies, including AI.
• Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
• Function as a subject matter expert across multiple security domains like cloud security posture management, identity and access management, and server/endpoint protection; provide input into strategic security initiatives and roadmaps.
• Stay up to date with emerging threats and trends; assist with monitoring and evaluating safeguards and remediating gaps.
• Author code/scripts to audit, monitor, and remediate undesirable configurations within the environment.
• Perform security code reviews and identify implementation details that may lead to vulnerabilities.
• Occasionally participate in the security incident response process, providing expertise in root cause analysis and remediation.

Skills

Security architecture

Threat modeling

Cloud security

Regulatory compliance

Programming basics

Education

Bachelor's degree or equivalent in CS, Cyber Security, Information Systems, or related field

13+ years of hands-on security experience with 3+ years in security architecture

Tools

AWS ECS/ECR

AWS Lambda

API Gateway

RDS

Secrets Manager

S3

IAM

Python

Job description

As a senior member of our corporate security team, you will play a key role in designing and validating secure architectures across both cloud and hybrid environments. Youll lead security architecture assessments, identify and mitigate potential threats, and help shape our overall security posture. This role involves close collaboration with stakeholders across the business and corporate IT and is primarily an internally facing position.

Duties & Responsibilities

• Lead security architecture assessments for new and existing applications, systems and integrations.
• Partner with product engineering, DevOps, and compliance teams to develop secure architecture patterns that consider factors like data protection, access control, and segmentation.
• Assess and validate security requirements based on the capabilities and risks of new and emerging information technologies, including Artificial Intelligence (AI).
• Participate in threat modeling exercises to proactively identify security risks and guide secure design decisions.
• Function as a subject matter expert across multiple security domains like cloud security posture management, identity and access management, and server/endpoint protection. Provide input into strategic security initiatives and roadmaps.
• Stay up to date with emerging threats and trends. Assist with monitoring and evaluating the effectiveness of information security safeguards and remediating discovered gaps.
• Author code/scripts to audit, monitor, and/or remediate undesirable configurations within the environment.
• Perform security code reviews and be able to identify implementation details that may lead to security vulnerabilities.
• Occasionally participate in the security incident response process, providing expertise in root cause analysis and remediation.

Qualifications

• Bachelors degree or equivalent work experience in Computer Science, Cyber Security, Information Systems, or a related field.
• 13+ years of hands-on security experience, with at least 3 years in a dedicated security architecture role.
• Experience securing micro-service and serverless architectures, with an emphasis on AWS services like ECS/ECR, Lambda, API Gateway, RDS, Secrets Manager, S3, and IAM.
• Strong working knowledge of regulatory and compliance frameworks like ISO27001, NIST, HITRUST, and SOC.
• Certifications in AWS (Solutions Architect, Security Specialty), Azure (AZ-104, AZ-305, AZ-500) or equivalents from another public cloud provider.
• Proficient in authentication protocols like LDAP, SAML, and OAuth.
• Comfortable with at least one coding language like Python, PowerShell, Java/JavaSript, or Node.
• Prior experience in networking and firewalling is a plus.