Cyber security Architect

Wipro; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Wipro is seeking a senior Security Application Architect to design, govern, and advance secure architectures across enterprise applications. This role embeds security throughout the lifecycle and collaborates with engineering, product, cloud, infrastructure, and risk teams.

Lead threat modeling, secure design reviews, CI/CD security, and AI security governance, ensuring compliance with industry standards and robust safety controls. Strong cross-functional leadership required.

Qualifications

• 8–10 years in application security or architecture roles.
• Expertise in cloud-native architectures, IAM, API security, data protection, K8s, DevSecOps.
• Knowledge of Java, .NET, Python, Node.js, or Go.
• Familiarity with OWASP Top 10, CWE, API Security Top 10.

Responsibilities

• Design secure architecture blueprints and reference designs.
• Lead threat modeling workshops and security risk assessments.
• Embed security in CI/CD pipelines (SAST, SCA, DAST, IaC scanning).
• Define security standards for AI platforms, identity, data protection, and encryption.
• Lead AI security validation, audits, and continuous monitoring.
• Drive secure architecture modernization and cloud migrations.

Skills

Cloud-native architectures

IAM

API security

Data protection

Kubernetes

DevSecOps

Tools

Kubernetes (K8s)

Job description

The Security Application Architect is a senior technical leader responsible for designing, governing, and advancing secure architectures across enterprise applications. This role embeds security throughout the application lifecycle and collaborates with engineering, product, cloud, infrastructure, and risk teams.

Key Responsibilities

1. Application Security Architecture & Design

• - Develop secure architecture blueprints and reference designs.
• - Perform secure design reviews and threat modeling.
• - Architect identity, data protection, API security, and isolation controls.
• - Guide developers on secure coding patterns.
• - Design and implement secure AI/GenAI architectures, ensuring appropriate controls for AI models, training data, inference pipelines, AI agents, and integrations across cloud and enterprise environments.
• - Perform AI threat modeling and security assessments to identify and mitigate risks such as prompt injection, model poisoning, data leakage, unauthorized model access, adversarial attacks, and AI supply chain vulnerabilities.
• - Establish and enforce AI governance and Responsible AI controls, including security-by-design principles, human oversight, auditability, explainability, regulatory compliance, and AI risk management frameworks.
• - Define security standards for AI platforms and agents, including identity and access management, data protection, encryption, secrets management, monitoring, logging, and secure integration with enterprise security services.
• - Lead AI security validation activities, including red teaming, adversarial testing, model assurance reviews, vulnerability assessments, and continuous monitoring to ensure AI solutions remain secure, resilient, and compliant throughout their lifecycle.

2. Governance & Standards

• - Define application security standards and secure SDLC requirements.
• - Establish policies, guardrails, and code quality gates.
• - Ensure compliance with NIST, CIS, Zero Trust, HIPAA, PCI DSS, GDPR.

3. Threat Modeling & Risk Assessments

• - Lead threat modeling workshops.
• - Conduct security risk assessments for new products and design changes.
• - Recommend compensating controls.

4. Security Engineering & Enablement

• - Embed security in CI/CD pipelines (SAST, SCA, DAST, IaC scanning).
• - Design secure APIs using OAuth2, OIDC, mTLS.
• - Support identity provider integrations and secrets management.

5. Incident Response & Architecture Review

• - Act as SME during incidents, assisting with forensics.
• - Review logs and telemetry for architectural weaknesses.
• - Lead post-incident hardening.

6. Technology Strategy & Innovation

• - Evaluate new technologies and security tooling.
• - Drive secure architecture modernization.
• - Support cloud migration and digital transformation.

Required Qualifications

• - 8–10years in application security or architecture roles.
• - Expertise in cloud-native architectures, IAM, API security, data protection, K8s, DevSecOps.
• - Knowledge of Java, .NET, Python, Node.js, or Go.
• - Familiarity with OWASP Top 10, CWE, API Security Top 10.

Preferred Certifications

• - CISSP, CSSLP, CCSP, AWS/Azure Security Specialty.
• - GIAC (GWAPT, GCSA, GCPN), SABSA, TOGAF.

Soft Skills

• - Strong communication, leadership, problem-solving, and stakeholder influence.

Success Measures (KPIs)

• - Reduction of vulnerabilities.
• - Adoption of secure patterns.
• - Improved CI/CD security automation.
• - Faster remediation of audit findings.

Position Overview

The Security Application Architect is a senior technical leader responsible for designing, governing, and advancing secure architectures across enterprise applications. This role embeds security throughout the application lifecycle and collaborates with engineering, product, cloud, infrastructure, and risk teams.

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.