Cybersecurity Subject Matter Expert

Sunovaa Tech; Pune District, Bengaluru; Hybrid; INR 2,500,000 - 4,000,000; Full time

Job summary

Sunovaa Tech is seeking a senior cybersecurity professional to guide security across products, platforms, and cloud services. You will drive Security-by-Design, Secure SDLC, and risk-based reviews of APIs, microservices, and architectures.

You will collaborate with architecture, engineering, DevOps, QA and product teams to strengthen cloud and container security, oversee threat modeling, and provide practical guidance on secure coding and remediation.

Qualifications

• 7+15 years? of experience? in Cybersecurity, Product Security, Application Security or Security Engineering.
• Strong hands‑on experience in Application/Product Security and Secure SDLC.
• Proven experience with Threat Modeling, STRIDE/PASTA preferred.
• Strong understanding of Security Architecture and Security-by-Design.
• Hands‑on experience with AWS and/or Azure Cloud Security.
• Strong knowledge of DevSecOps and CI/CD security integration.
• Experience with SAST, DAST and SCA tools and security gates.
• Good understanding of Docker, Kubernetes and Container Security.
• Strong knowledge of API and Microservices Security.
• Good understanding of OWASP Top 10 and common app security vulnerabilities.
• Strong analytical, problem‑solving and communication skills as a technical SME.
• Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.

Responsibilities

• Provide cybersecurity expertise across products, platforms, cloud services, and software initiatives.
• Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.
• Conduct threat modeling, security assessments, and architecture/design reviews.
• Define and implement Application/Product Security standards and controls.
• Integrate security into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.
• Assess and strengthen AWS/Azure cloud security and cloud-native environments.
• Guide container and Kubernetes security for modern platforms.
• Review and secure APIs, microservices, authentication and authorization mechanisms.
• Collaborate with Architects, Engineering, DevOps, QA, PM and Cybersecurity teams to mitigate risks.
• Provide guidance on vulnerabilities, secure coding, remediation and best practices.
• Support penetration testing, vulnerability assessments and security validation activities.
• Establish cybersecurity standards, controls and governance.

Skills

Threat Modeling

Security-by-Design

Secure SDLC

DevSecOps

CI/CD security integration

API & Microservices Security

Container & Kubernetes Security

AWS/Azure Cloud Security

SAST/DAST/SCA

Security Architecture

Tools

SAST/DAST/SCA tools

Docker

Kubernetes

Job description

Role & Responsibilities

• Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives.
• Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.
• Conduct threat modeling, security assessments, and security architecture/design reviews.
• Define and implement Application/Product Security standards and controls.
• Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.
• Assess and strengthen AWS/Azure cloud security and cloud-native environments.
• Guide container and Kubernetes security for modern application platforms.
• Review and secure APIs, microservices, authentication and authorization mechanisms.
• Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks.
• Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices.
• Support penetration testing, vulnerability assessments and security validation activities.
• Establish cybersecurity standards, controls and governance aligned with organizational and industry requirements.

Preferred Candidate Profile

• 715 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering.
• Strong hands‑on experience in Application/Product Security and Secure SDLC.
• Proven experience with Threat Modeling, preferably STRIDE/PASTA.
• Strong understanding of Security Architecture and Security-by-Design.
• Hands‑on experience with AWS and/or Azure Cloud Security.
• Strong knowledge of DevSecOps and CI/CD security integration.
• Experience with SAST, DAST and SCA tools and security gates.
• Good understanding of Docker, Kubernetes and Container Security.
• Strong knowledge of API and Microservices Security.
• Good understanding of OWASP Top 10 and common application security vulnerabilities.
• Strong analytical, problem‑solving and communication skills with the ability to work independently as a technical SME.
• Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.