Principal Architect - Cybersecurity

HARMAN India; Bengaluru; On-site; INR 3,500,000 - 7,000,000; Full time

Job summary

HARMAN Automotive in Bengaluru is seeking a Lead Cybersecurity Architect to define security architecture for automotive cloud services and customer-facing web portals. You will translate business and regulatory needs into practical security requirements and assurance evidence across the solution lifecycle.

As a senior contributor, you will partner with cloud, backend, web, mobile, DevSecOps, privacy, and compliance teams to deliver secure-by-design outcomes and drive risk-based decisions.

Responsibilities

• Own end-to-end cybersecurity architecture for automotive cloud platforms, backend services, web portals, APIs, identity flows, data pipelines, and vehicle-to-cloud interfaces.
• Lead TARA activities and translate identified threats and risks into cybersecurity goals, requirements, controls, and traceable architecture decisions.
• Define reusable security patterns for identity and access management, authentication, authorization, privileged access, secrets management, PKI, encryption, certificate lifecycle management, and secure communications.
• Review cloud and application architectures for trust boundaries, network segmentation, API security, logging, monitoring, vulnerability management, data protection, resilience, and secure deployment.
• Guide threat modeling, cybersecurity concept development, architecture reviews, design assurance, and risk-acceptance discussions throughout the development lifecycle.
• Align relevant cybersecurity work products and assurance evidence with ISO/SAE 21434, and support activities related to CSMS, SUMS, UNECE R155, UNECE R156, audits, and Vehicle Type Approval.
• Partner with engineering and DevSecOps teams to embed security into CI/CD pipelines, infrastructure as code, software supply-chain controls, dependency management, and release governance.
• Define and review security testing strategies covering SAST, DAST, software composition analysis, API security testing, cloud-configuration reviews, and penetration testing.
• Provide technical leadership during vulnerability triage and cybersecurity incident response, ensuring that affected product and service teams engage the appropriate cybersecurity stakeholders.
• Communicate technical risks, architecture trade-offs, and remediation priorities clearly to engineering leaders, product owners, auditors, and customer-facing teams.

Job description

A Career at HARMAN Automotive

We're a global, multi-disciplinary team that's putting the innovative power of technology to work and transforming tomorrow. At HARMAN Automotive, we give you the keys to fast-track your career.

• Engineer audio systems and integrated technology platforms that augment the driving experience
• Combine ingenuity, in-depth research, and a spirit of collaboration with design and engineering excellence
• Advance in-vehicle infotainment, safety, efficiency, and enjoyment

About The Role

As a Lead Cybersecurity Architect, you will define and guide the security architecture for automotive cloud services and customer-facing web portals supporting connected vehicle ecosystems. You will translate business, product, cybersecurity, privacy, and regulatory needs into practical security requirements, architecture decisions, and assurance evidence across the solution lifecycle. As a senior individual contributor, you will partner with cloud, backend, web, mobile, vehicle, DevSecOps, privacy, and compliance teams to drive secure-by-design outcomes.

What You Will Do

• Own end-to-end cybersecurity architecture for automotive cloud platforms, backend services, web portals, APIs, identity flows, data pipelines, and vehicle-to-cloud interfaces.
• Lead TARA activities and translate identified threats and risks into cybersecurity goals, requirements, controls, and traceable architecture decisions.
• Define reusable security patterns for identity and access management, authentication, authorization, privileged access, secrets management, PKI, encryption, certificate lifecycle management, and secure communications.
• Review cloud and application architectures for trust boundaries, network segmentation, API security, logging, monitoring, vulnerability management, data protection, resilience, and secure deployment.
• Guide threat modeling, cybersecurity concept development, architecture reviews, design assurance, and risk-acceptance discussions throughout the development lifecycle.
• Align relevant cybersecurity work products and assurance evidence with ISO/SAE 21434, and support activities related to CSMS, SUMS, UNECE R155, UNECE R156, audits, and Vehicle Type Approval.
• Partner with engineering and DevSecOps teams to embed security into CI/CD pipelines, infrastructure as code, software supply-chain controls, dependency management, and release governance.
• Define and review security testing strategies covering SAST, DAST, software composition analysis, API security testing, cloud-configuration reviews, and penetration testing.
• Provide technical leadership during vulnerability triage and cybersecurity incident response, ensuring that affected product and service teams engage the appropriate cybersecurity stakeholders.
• Communicate technical risks, architecture trade-offs, and remediation priorities clearly to engineering leaders, product owners, auditors, and customer-facing teams.