Cyber Security Lead/ Expert

Swediumglobal; Bengaluru; On-site; INR 2,000,000 - 3,000,000; Full time

Job summary

A tech company in Bengaluru is seeking a Cyber Security Lead/Expert to own and evolve their Software Security Capability strategy. The ideal candidate will have over 10 years in application security and proven leadership in security programs. Responsibilities include managing security tooling and establishing governance in AI-assisted development. Strong expertise in OWASP, NIST, and ISO standards is essential. This role demands excellent communication skills and a balanced approach to developer productivity and security risk.

Qualifications

• 10+ years in application security / secure architecture.
• Experience leading security capabilities or programs.
• Hands-on expertise in OWASP, NIST SSDF, and ISO/IEC standards.

Responsibilities

• Own the Software Security Capability strategy and roadmap.
• Define policy-as-code standards and enforcement.
• Lead backlog prioritization and influence engineering.

Skills

Application security / secure architecture

Security capability leadership

OWASP standards

NIST SSDF

ISO/IEC 27034

GitHub ecosystem governance

Threat modelling

AI security governance

Strong communication skills

Job description

Swedium Global is looking for Cyber Security Lead/Expert:

Overview

The Software Security Lead owns the Software Security Capability strategy, maturity model, roadmap, and architectural alignment. This role drives secure‑by‑default development at scale and defines enterprise guardrails for AI‑assisted development and LLM‑enabled products.

This is a capability leadership role — not a GRC role.

Key Responsibilities

Capability Ownership

• Define and evolve the Software Security Capability target state.
• Own maturity model, roadmap, and cross‑domain adoption strategy.
• Represent the capability in architecture and governance forums.
• Align capability to Zero Trust and internal target architecture.

Strategic Tooling & Platform Governance

• Own strategy and lifecycle for:
  • SAST, DAST, SCA ecosystem
  • GHAS governance
  • SBOM & supply chain security
• Establish policy-as-code standards and enforcement mechanisms.
• Microservices
• Cloud-native
• Institutionalize threat modelling practices.
• Establish enterprise‑level risk acceptance frameworks.

AI Security & Future Software Development (Mandatory)

• AI-assisted coding tools
• AI-generated code governance
• Provenance & license controls
• Establish secure design patterns for LLM-enabled features:
  • Prompt injection mitigation
  • Model isolation strategies
  • Data minimization
  • Red‑teaming practices
• Track market evolution in LLM security and supply chain standards.
• Translate evolving risks into enforceable CI/CD guardrails.
  
• Define engineering‑centric metrics:
  • Risk reduction
  • Exploitability-based prioritization
  • Build protection coverage
  • Paved‑road adoption rate

Leadership & Stakeholder Management

• Lead backlog prioritization.
• Influence engineering leadership.
• Balance developer productivity and security risk.
• Mentor senior engineers and build capability depth.

Required Skills

• 10+ years in application security / secure architecture.
• Proven experience leading security capabilities or programs.
• Deep hands‑on expertise in:
  • OWASP (Top 10, SAMM, ASVS, MASVS)
  • NIST SSDF (SP 800‑218)
  • ISO/IEC 27034
• Strong experience with GitHub ecosystem governance.
• Deep expertise in threat modelling and risk-based prioritization.
• Demonstrated AI security governance experience.
• Strong communication and executive engagement skills.