Information Security Analyst Lead

Headsnminds Consultants; Mumbai; Hybrid; INR 2,000,000 - 4,000,000; Full time

Job summary

Headsnminds Consultants seeks a Senior Security Architect in Mumbai to provide application security architecture support for business systems. You will manage a library of security architecture patterns and conduct comprehensive assessments across applications, systems, and infrastructure.

You will lead threat modeling (STRIDE/PASTA) for new features, APIs, and microservices, mapping findings to OWASP Top 10 and OWASP ASVS controls, and promote secure-by-design principles throughout development

Qualifications

• Experience conducting security architecture assessments for applications, systems and infrastructure.
• Deep understanding of security architecture principles and frameworks.
• Lead application threat modeling (STRIDE/PASTA) for new features, APIs and microservices.

Responsibilities

• Provide application security architecture support to teams building business systems.
• Manage and maintain a library of application security architecture patterns.
• Conduct comprehensive security architecture assessments for applications, systems, and infrastructure.
• Implement secure-by-design principles in solution architecture and development processes.

Skills

Threat Modeling

OWASP Top 10

OWASP ASVS

Secure-by-Design

Security Architecture

Enterprise Frameworks

Job description

Role & responsibilities

• Provide application security architecture support to the teams that build and maintain business systems.
• Manage and maintain a library of application security architecture patterns
• Conduct comprehensive security architecture assessments for applications, systems, and infrastructure
• Implement secure-by-design principles in solution architecture and development processes.

Preferred candidate profile

• Proven experience in security architecture assessments and secure-by-design implementations.
• Experience with enterprise security frameworks and methodologies.
• Deep understanding of security architecture principles and frameworks
• Lead application threat modeling (STRIDE/PASTA) for new features, APIs, and microservices, mapping findings to OWASP Top 10 and OWASP ASVS controls.