Information Security Architect

Acesoft Labs; Hyderabad; Hybrid; INR 4,000,000 - 8,500,000; Full time

Job summary

Acesoft Labs in Bangalore, India, is seeking an Information Security Architect with a minimum of 6 years’ experience in information security and product security to design secure architectures across cloud-native and on-premise deployments.

You will drive threat modeling using SD Elements, STRIDE or PASTA, integrate security into DevSecOps (SAST/DAST, CI/CD, container scanning, IaC security), and mentor teams on best practices while aligning with ISO 27001, NIST and OWASP.

Qualifications

• Minimum 6 years in information security architecture or product security.
• Hands-on with vulnerability analysis, design reviews, and architecture hardening.
• Proven track record securing CI/CD pipelines with SAST/DAST, container scanning, and secrets management.
• Experience with threat modeling using SD Elements and frameworks STRIDE/PASTA.
• CISSP certification is mandatory.
• Excellent cross-functional collaboration and communication.
• Familiarity with cloud security and IaC security is a plus.

Responsibilities

• Lead security architecture design across our product portfolio, spanning cloud-native and on-premise deployments.
• Conduct threat modeling using SD Elements, STRIDE, PASTA, or similar frameworks to identify and remediate design-level risks.
• Integrate security across DevSecOps processes, including CI/CD automation, SAST/DAST, container scanning, infrastructure-as-code security, and secrets management.
• Define and enforce security patterns, controls, and reference architectures across product teams.
• Perform secure design reviews, architecture risk assessments, and propose mitigation plans.
• Review designs, code, third-party libraries, and cloud configurations for compliance with secure architecture principles.
• Collaborate with product, engineering, QA, and DevOps to embed security early in development cycles.
• Provide subject matter expertise, guidance, and training on security best practices.
• Stay abreast of emerging threats, vulnerabilities, and tooling for product security.
• Partner with governance, risk, and compliance teams to support audits and ensure alignment with security standards like ISO 27001, NIST, and OWASP.

Skills

InfoSec architecture

Product security

Threat modeling

CI/CD security

SAST/DAST tooling

Container security

IaC security

Cross-functional collaboration

Communication skills

Education

CISSP certification

CCSP

CISM

Tools

SD Elements

STRIDE

PASTA

Terraform

CloudFormation

SAST tooling

DAST tooling

Job description

Description: Information Security Architect

Location: Bangalore, India

Experience: Minimum 6 years in information/product security

Key Responsibilities

• Lead security architecture design across our product portfolio, spanning cloud-native and on-premise deployments.
• Conduct threat modeling using SD Elements, STRIDE, PASTA, or similar frameworks to identify and remediate design-level risks.
• Integrate security across DevSecOps processes, including CI/CD automation, SAST/DAST, container scanning, infrastructure-as-code security, and secrets management.
• Define and enforce security patterns, controls, and reference architectures across product teams.
• Perform secure design reviews, architecture risk assessments, and propose mitigation plans.
• Review designs, code, third-party libraries, and cloud configurations for compliance with secure architecture principles.
• Collaborate with product, engineering, QA, and DevOps to embed security early in development cycles.
• Provide subject matter expertise, guidance, and training on security best practices.
• Stay abreast of emerging threats, vulnerabilities, and tooling for product security.
• Partner with governance, risk, and compliance teams to support audits and ensure alignment with security standards like ISO 27001, NIST, and OWASP.

Must-Have Qualifications

• Minimum 6 years experience in information security architecture, product security, or related roles.
• Hands-on experience with product security, including vulnerability analysis, design reviews, and architecture hardening.
• Proven track record securing CI/CD pipelines , including tooling for SAST/DAST, container scanning, and secrets detection.
• Demonstrated experience with threat modeling (especially using SD Elements) and security frameworks (STRIDE, PASTA).
• CISSP certification is mandatory.
• Strong collaboration across cross-functional teams (Dev, Ops, QA).
• Excellent communication skills, with ability to translate technical risks to business stakeholders.

Nice-to-Have Skills

• Cloud security architecture ( AWS, Azure, GCP ).
• Familiarity with SD Elements security risk management platform.
• Experience with secure infrastructure-as-code (Terraform, CloudFormation).
• Exposure to agile DevSecOps practices and tooling integrations.
• Additional certifications: CCSP, CSA CCSK, CISM , etc.Enable Skills-Based Hiring No