Java Application Security Architect - Banking Domain

Tata Consultancy Services; Pune District, Chennai District, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services is seeking a Security Analyst with 5–10 years of experience to safeguard core banking and digital banking platforms. You will assess security architectures, validate API security controls, and oversee secure deployment practices across Java-based services and microservices.

Candidates should be proficient in cloud security, OWASP standards, and risk-management processes, with strong communication and analytical capabilities to work across cross-functional teams.

Qualifications

• 5–10 years of experience in security analysis within Core Banking & Digital Banking environments.
• Experience troubleshooting API security, session management, certificates, encryption, and secure token flows.
• Working knowledge of Java or other backend languages used in Core Banking systems.
• Familiarity with REST APIs, microservices, CI/CD pipelines, and secure deployment practices.
• Basic understanding of cloud environments (AWS/Azure/GCP) and security controls.
• Understanding of banking sector security regulations and data protection requirements.
• Understanding of digital banking channels, secure API consumption, authentication protocols, and risk controls.
• Good analytical abilities
• Good Communication skills
• Bachelor's degree in IT, Computer Science, Cybersecurity, or related fields.
• Certifications preferred: CEH, Security+, or equivalents.

Skills

Analytical abilities

Communication skills

Cloud security awareness

Security protocols & risk controls

Java & backend programming familiarity

REST APIs & microservices security

OWASP & secure coding knowledge

Education

Bachelor's degree in IT / Computer Science / Cybersecurity

Certifications: CEH or Security+ or equivalents

Tools

SAST tools (Fortify)

DAST/IAST/SCA tools (e.g., Fortify, SonarQube)

Container orchestration

Kafka, CI/CD pipelines

Cloud platforms (AWS/Azure/GCP) security controls

Job description

Greetings!!

Role: Security Analyst

Location: Thane / Bangalore/Chennai/Pune/NCR

Experience : 5 to 10 years

Must-Have:

1. 1. Experience of working in Core Banking & Digital Banking environments will be preferred
2. 2. Experience troubleshooting API security, session management, certificates, encryption, and secure token flows.
3. 3. Working knowledge of Java or other backend languages used in Core Banking systems.
4. 4. Familiarity with REST APIs, microservices, CI/CD pipelines, and secure deployment practices.
5. 5. Basic understanding of cloud environments (AWS/Azure/GCP) and security controls.
6. 6. Understanding of banking sector security regulations and data protection requirements.
7. 7. Understanding of digital banking channels, secure API consumption, authentication protocols, and risk controls.
8. 8. Good analytical abilities
9. 9. Good Communication skills
10. 10. Bachelor's degree in IT, Computer Science, Cybersecurity, or related fields.
11. 11. Certifications preferred: CEH, Security+, or equivalents.

Required Technical Skill Set:

1. 1. Expertise in JavaEE architecture
2. 2. Exposure to in cloud-native architecture
3. 3. Experience in Java Application Design and architecture along with modern technologies like Apache Kafka, Container orchestration and microservices architecture.
4. 4. Strong knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10).
5. 5. Expertise in secure coding practices for Java, Spring, REST APIs, microservices.
6. 6. knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.
7. 7. Hands on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube )
8. 8. AWS/Azure security controls, IAM, VPC architecture, zero trust principles.