Lead Security Solution Architect for Banking project

Expleo; Chennai District; Sur place; INR 3 500 000 - 7 000 000; Plein temps

Résumé du poste

Expleo is seeking a Lead Security Solution Architect for a Banking project in Chennai, India. You will act as the security design authority, crafting security designs and requirements for client-delivered components, while reviewing designs before build.

You will lead RASP and mobile threat defence evaluations, chair design authority meetings, and ensure risk is assessed and mitigated across cross-CR dependencies. English proficiency is required; travel to UAE may be needed.

Qualifications

• Must have expertise in security architecture and zero trust.
• Experience with Open Banking API security (mTLS, OAuth2, FAPI).

Responsabilités

• Produce HLD/LLD for mobile security and network segregation.
• Define security requirements for client-delivered components and reviews.
• Lead RASP/mobile threat defence vendor evaluation and recommendation.
• Chair design authority and security design reviews.
• Assess residual risk and author statements for acceptance.
• Support threat modelling and security test scoping.

Connaissances

Enterprise security architecture

Open Banking / API security

Mobile security (RASP, attestation)

Security design reviews

Outils

draw.io

Visio

Confluence

OWASP Threat Dragon

IriusRisk

Description du poste

Overview

Lead Security Solution Architect for Banking project

Security design authority for all eight CRs – designs Expleo-delivered controls, specifies security requirements for client-delivered components and reviews client designs before build.

Responsibilities

• Produce HLD/LLD for mobile security, PKI segregation, firewall/WAF clustering and traffic segregation
• Define security requirements and acceptance criteria for client-delivered Splunk, OBS and carrier work
• Write interface and security specifications for client-built backend APIs (telemetry, attestation, risk scoring)
• Lead the RASP / mobile threat defence vendor evaluation and recommendation
• Chair the fortnightly design authority and security design reviews
• Assess residual risk and author residual-risk statements for acceptance
• Ensure cross-CR dependencies are designed coherently
• Support threat modelling and security test scoping with the Test Lead

Essential skills

• Enterprise security architecture, zero trust and network segmentation
• Open Banking / Open Finance API security – mTLS, OAuth2, FAPI
• PKI, mobile application security (RASP, attestation) and WAF design
• Security design review of third-party / client-built solutions

Good to have

• SIEM architecture (Splunk) and resilience design
• Operational-resilience and concentration-risk frameworks
• UAE PDPL / CBUAE security expectations

Tools

draw.io / Visio, Confluence, threat-modelling tools (OWASP Threat Dragon / IriusRisk)

Experience

• 8+ years of experience in software testing, preferably in Banking, Payments or FinTech.
• Experience in BFSI or other regulated-sector programmes
• Clear written and spoken English; Arabic an advantage
• Willingness to travel to the UAE when required
• Eligibility for client background screening and NDA