Cyber Security SME

Sutherland; Pune District; On-site; INR 4,000,000 - 6,000,000; Full time

Job summary

Sutherland is seeking a Cybersecurity Subject Matter Expert to provide deep technical guidance across products, platforms, cloud services, and software initiatives. You will partner with architects, DevOps, QA, product management, and stakeholders to ensure security-by-design across the lifecycle.

You will lead threat modeling, risk assessments, and vulnerability management while coordinating testing and SBOM governance. Travel to Pune for in-person rounds may be required in a hybrid setup.

Qualifications

• Requires Bachelor's or Master's degree in CS, cybersecurity, or related field.
• 8+ years in software, cloud, platform, or cybersecurity.
• 5+ years in product cybersecurity or security architecture.
• Healthcare or medical device experience is preferred.

Responsibilities

• Act as the primary cybersecurity expert for assigned products, platforms, and services.
• Provide cybersecurity architecture guidance, design reviews, and implementation recommendations.
• Lead Threat Modeling, Threat & Risk Analysis (TRA), and cybersecurity risk assessments.
• Drive vulnerability management, remediation tracking, and security incident support activities.
• Coordinate penetration testing and security assessments.
• Guide teams on SAST, DAST, Software Composition Analysis (SCA), and SBOM governance.
• Develop and maintain cybersecurity standards, procedures, guidelines, and secure baselines.
• Support compliance with NIST, ISO 27001/27002, FDA Cybersecurity Guidance, and IEC 81001-5-1.
• Provide cybersecurity training, mentoring, and technical leadership.
• Work with geographically distributed development teams in USA, Canada, Finland, Switzerland, and India

Skills

Application Security

Product Security

Secure SDLC

Threat Modeling

Risk Assessment

Container & Kubernetes Security

Identity & Access Management

Vulnerability Management

Incident Response

SAST tools

DAST tools

SBOM tooling

OWASP Top 10

NIST

ISO 27001/27002

Education

Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field

Tools

SAST tools

DAST tools

SBOM tooling

Kubernetes

Job description

About Sutherland
Artificial Intelligence. Automation. Cloud engineering. Advanced analytics. For business leaders, these are key factors of success. For us, they’re our core expertise.
We work with iconic brands worldwide. We bring them a unique value proposition through market-leading technology and business process excellence.
We’ve created over 200 unique inventions under several patents across AI and other critical technologies. Leveraging our advanced products and platforms, we drive digital transformation, optimize critical business operations, reinvent experiences, and pioneer new solutions, all provided through a seamless “as a service” model.
For each company, we provide new keys for their businesses, the people they work with, and the customers they serve. We tailor proven and rapid formulas, to fit their unique DNA. We bring together human expertise and artificial intelligence to develop digital chemistry. This unlocks new possibilities, transformative outcomes and enduring relationships.
Sutherland
Unlocking digital performance. Delivering measurable results.

Job Description

The Cybersecurity Subject Matter Expert (SME) provides deep technical expertise, guidance, and governance for cybersecurity across products, platforms, cloud services, and software engineering initiatives. The SME partners with architects, engineering teams, DevOps, QA, product management, and cybersecurity stakeholders to ensure security-by-design principles are embedded throughout the product lifecycle.

Key Responsibilities

• Act as the primary cybersecurity expert for assigned products, platforms, and services.
• Provide cybersecurity architecture guidance, design reviews, and implementation recommendations.
• Lead Threat Modeling, Threat & Risk Analysis (TRA), and cybersecurity risk assessments.
• Drive vulnerability management, remediation tracking, and security incident support activities.
• Coordinate penetration testing and security assessments.
• Guide teams on SAST, DAST, Software Composition Analysis (SCA), and SBOM governance.
• Develop and maintain cybersecurity standards, procedures, guidelines, and secure baselines.
• Support compliance with NIST, ISO 27001/27002, FDA Cybersecurity Guidance, and IEC 81001-5-1.
• Provide cybersecurity training, mentoring, and technical leadership.
• Work with geographically distributed development teams in USA, Canada, Finland, Switzerland, and India

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Software Engineering, or related field.
• 8+ years of experience in software engineering, cloud engineering, platform engineering, or cybersecurity.
• 5+ years of direct experience in product cybersecurity, application security, or security architecture.
• Experience in regulated healthcare or medical device environments preferred.

Technical Skills

• Application Security, Product Security, Secure SDLC
• Threat Modeling and Risk Assessment
• Container and Kubernetes Security
• Identity & Access Management
• Vulnerability Management and Incident Response
• SAST, DAST, SCA and SBOM tools
• OWASP Top 10, NIST, ISO 27001/27002

Preferred Certifications

• CISSP
• CSSLP
• CCSP
• CEH
• Azure Security Engineer Associate
• CKS

Additional Information

Please note the requirements for the candidates:

• Should be open to travel to Pune for the in-person interview round
• Willing to work in a hybrid model from the Pune office