Information Security Architect

Daimler Truck Innovation Center India (DTICI); Bengaluru Urban; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Daimler Truck Innovation Center India (DTICI) in Bengaluru seeks a technically strong Information Security Architect to lead security design, threat modeling and architecture reviews across multiple projects. You'll document risks using SD Elements, align decisions with security frameworks and act as security advisor to development teams.

Requires 9–12 years in information security/architecture, CISSP, hands-on threat modeling, VAPT experience, Azure cloud security, and strong communication with

Qualifications

• 9-12 years of experience in information security or architecture-related roles.
• CISSP Certification is a MUST
• Strong background in application security, secure development lifecycle, and architecture design.
• Hands-on experience in threat modeling and understanding of attack surfaces.
• Past experience in VAPT execution and remediation handling (even though not part of the current responsibilities)
• Experience using SD Elements for security requirements and issue tracking is mandatory.
• Proficient in architecture frameworks such as TOGAF, SABSA, or NIST.
• Good knowledge of cloud security (preferably Azure) and secure DevOps practices.
• Excellent communication skills to collaborate with global stakeholders and technical teams.

Responsibilities

• Design and review secure system and application architectures.
• Conduct and support threat modeling and risk assessment activities.
• Identify and document attack surfaces and potential vulnerabilities during design reviews.
• Act as a security advisor to project and architecture teams throughout the development lifecycle.
• Capture and manage technical security observations in SD Elements, ensuring traceability and remediation tracking.
• Engage with stakeholders across development, architecture, and infrastructure teams to embed security
• Align solutions with enterprise architecture frameworks (e.g., TOGAF, SABSA) and internal security policies.
• Participate in architecture review boards and security governance forums.
• Support secure design validation for cloud, on-prem, and hybrid environments.

Skills

Threat modeling

Application security

DevSecOps

Security architecture

Communication

Cloud security

Tools

SD Elements

Azure

Job description

We are seeking a technically strong and hands-on Information Security Architect to drive security design, threat modeling, and architecture reviews across multiple projects. The ideal candidate will support teams with technical security requirements, document risks using SD Elements, and align architectural decisions with security best practices and frameworks. While this role does not directly involve conducting Vulnerability Assessment and Penetration Testing (VAPT), prior experience in these areas is essential to understand potential risks and recommend effective security controls.

Responsibilities

• Design and review secure system and application architectures.
• Conduct and support threat modeling and risk assessment activities.
• Identify and document attack surfaces and potential vulnerabilities during design reviews.
• Act as a security advisor to project and architecture teams throughout the development lifecycle.
• Capture and manage technical security observations in SD Elements, ensuring traceability and remediation tracking.
• Engage with stakeholders across development, architecture, and infrastructure teams to embed security
• Align solutions with enterprise architecture frameworks (e.g., TOGAF, SABSA) and internal security policies.
• Participate in architecture review boards and security governance forums.
• Support secure design validation for cloud, on-prem, and hybrid environments.

Qualifications:

• 9-12 years of experience in information security or architecture-related roles.
• CISSP Certification is a MUST
• Strong background in application security, secure development lifecycle, and architecture design.
• Hands-on experience in threat modeling and understanding of attack surfaces.
• Past experience in VAPT execution and remediation handling (even though not part of the current responsibilities)
• Experience using SD Elements for security requirements and issue tracking is mandatory.
• Proficient in architecture frameworks such as TOGAF, SABSA, or NIST.
• Good knowledge of cloud security (preferably Azure) and secure DevOps practices.
• Excellent communication skills to collaborate with global stakeholders and technical teams.