Cyber security Architect

Wipro Technologies; Chennai District; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Wipro Technologies is seeking a Senior Security Application Architect to design and govern secure architectures across enterprise applications, embedding security in the lifecycle and collaborating with engineering, cloud, and risk teams.

You will lead threat modeling, secure SDLC, CI/CD security, and AI/GenAI security governance, ensuring compliance with industry standards and guiding developers on secure patterns.

Qualifications

• 8-10 years in application security or architecture roles.
• Experience with cloud-native architectures, IAM, API security, data protection, and DevSecOps.
• Familiarity with OWASP Top 10, CWE, API Security Top 10.
• Preferred certifications such as CISSP, CSSLP, CCSP, AWS/Azure Security Specialty.
• Strong communication and leadership skills.

Responsibilities

• Develop secure architecture blueprints and reference designs.
• Perform secure design reviews and threat modeling.
• Lead AI security validation activities and governance implementations.
• Embed security in CI/CD pipelines (SAST, SCA, DAST, IaC scanning).
• Design secure APIs with OAuth2, OIDC, and mTLS.
• Support identity provider integrations and secrets management.

Skills

Cloud-native architectures

IAM

API security

Data protection

Kubernetes

DevSecOps

Java

.NET

Python

Node.js

Go

Tools

SAST

SCA

DAST

IaC scanning

Job description

Job Description

The Security Application Architect is a senior technical leader responsible for designing, governing, and advancing secure architectures across enterprise applications. This role embeds security throughout the application lifecycle and collaborates with engineering, product, cloud, infrastructure, and risk teams.

Key Responsibilities

• 1. Application Security Architecture & Design
  • Develop secure architecture blueprints and reference designs.
  • Perform secure design reviews and threat modeling.
  • Architect identity, data protection, API security, and isolation controls.
  • Guide developers on secure coding patterns.
  • Design and implement secure AI/GenAI architectures, ensuring appropriate controls for AI models, training data, inference pipelines, AI agents, and integrations across cloud and enterprise environments.
  • Perform AI threat modeling and security assessments to identify and mitigate risks such as prompt injection, model poisoning, data leakage, unauthorized model access, adversarial attacks, and AI supply chain vulnerabilities.
  • Establish and enforce AI governance and Responsible AI controls, including security-by-design principles, human oversight, auditability, explainability, regulatory compliance, and AI risk management frameworks.
  • Define security standards for AI platforms and agents, including identity and access management, data protection, encryption, secrets management, monitoring, logging, and secure integration with enterprise security services.
  • Lead AI security validation activities, including red teaming, adversarial testing, model assurance reviews, vulnerability assessments, and continuous monitoring to ensure AI solutions remain secure, resilient, and compliant throughout their lifecycle.
• 2. Governance & Standards
  • Define application security standards and secure SDLC requirements.
  • Establish policies, guardrails, and code quality gates.
  • Ensure compliance with NIST, CIS, Zero Trust, HIPAA, PCI DSS, GDPR.
• 3. Threat Modeling & Risk Assessments
  • Lead threat modeling workshops.
  • Conduct security risk assessments for new products and design changes.
  • Recommend compensating controls.
• 4. Security Engineering & Enablement
  • Embed security in CI/CD pipelines (SAST, SCA, DAST, IaC scanning).
  • Design secure APIs using OAuth2, OIDC, mTLS.
  • Support identity provider integrations and secrets management.
• 5. Incident Response & Architecture Review
  • Act as SME during incidents, assisting with forensics.
  • Review logs and telemetry for architectural weaknesses.
  • Lead post-incident hardening.
• 6. Technology Strategy & Innovation
  • Evaluate new technologies and security tooling.
  • Drive secure architecture modernization.
  • Support cloud migration and digital transformation.

Required Qualifications

• 8-10years in application security or architecture roles.
• Expertise in cloud-native architectures, IAM, API security, data protection, K8s, DevSecOps.
• Knowledge of Java, .NET, Python, Node.js, or Go.
• Familiarity with OWASP Top 10, CWE, API Security Top 10.

Preferred Certifications

• CISSP, CSSLP, CCSP, AWS/Azure Security Specialty.
• GIAC (GWAPT, GCSA, GCPN), SABSA, TOGAF.

Soft Skills

• Strong communication, leadership, problem-solving, and stakeholder influence.

Success Measures (KPIs)

• Reduction of vulnerabilities.
• Adoption of secure patterns.
• Improved CI/CD security automation.
• Faster remediation of audit findings.

Reinvent your world.We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention. Come to Wipro. Realize your ambitions.

Applications from people with disabilities are explicitly welcome.

We are an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, caste, creed, religion, gender, marital status, age, ethnic and national origin, gender identity, gender expression, sexual orientation, political orientation, disability status, protected veteran status, or any other characteristic protected by law.

Wipro is committed to creating an accessible, supportive, and inclusive workplace. Reasonable accommodation will be provided to all applicants including persons with disabilities, throughout the recruitment and selection process. Accommodations must be communicated in advance of the application, where possible, and will be reviewed on an individual basis. Wipro provides equal opportunities to all and values diversity.