Principal Cybersecurity Architect

Providence Global Center; Hyderabad; Presencial; INR 3.500.000 - 7.000.000; Jornada completa

Descripción de la vacante

Providence Global Center is seeking an experienced Security Architect to lead Application Security, Security Architecture, and DevSecOps initiatives across the enterprise in Hyderabad. The role focuses on secure-by-design practices, governance, and risk management throughout the software development lifecycle.

You will collaborate with engineering and business leaders to advance security roadmaps, drive secure engineering, and ensure compliance with relevant standards and regulations.

Formación

• 12–15+ years of experience in cybersecurity, application security, security architecture, or DevSecOps.
• Strong expertise in secure SDLC, AppSec, Threat Modeling, Cloud Security, and DevSecOps.
• Experience leading enterprise-scale security transformation and secure engineering initiatives.
• Hands-on knowledge of CI/CD platforms, container security, API security, and cloud technologies.
• Strong understanding of technology risk management and security governance.
• Excellent stakeholder management, consulting, and communication skills.
• Ability to influence strategic decisions across business and technology functions.

Responsabilidades

• Lead enterprise Application Security and DevSecOps programs.
• Define and implement security architecture standards and secure engineering practices.
• Conduct architecture reviews, threat modeling, and application risk assessments.
• Drive adoption of secure SDLC, CI/CD security, and shift-left security practices.
• Integrate security testing tools such as SAST, DAST, SCA, and IAST into development pipelines.
• Provide security guidance for cloud, API, container, and microservices architectures.
• Establish governance, metrics, and remediation programs for application security risks.
• Partner with engineering and leadership teams to develop security roadmaps and technology strategies.
• Support compliance and regulatory requirements including HIPAA, HITRUST, SOC 2, NIST, and ISO 27001.
• Mentor engineers and architects on secure development and security best practices.

Conocimientos

Cybersecurity

Application Security

Security Architecture

DevSecOps

CI/CD Security

Stakeholder Management

Communication Skills

Threat Modeling

Herramientas

SAST

DAST

SCA

IAST

CI/CD Pipelines

Container Security

Cloud Technologies

Descripción del empleo

Security Architect – Application Security & DevSecOps

Location: Hyderabad, India | Experience: 12–15+ Years | Role Level: Principal Consultant / Security Architect

Role Summary

Seeking an experienced Security Architect to lead Application Security, Security Architecture, and DevSecOps initiatives across the enterprise. The role will drive secure-by-design practices, security governance, cloud and application security programs, and technology risk management while partnering with engineering and business leaders to strengthen security throughout the software development lifecycle.

Key Responsibilities

• Lead enterprise Application Security and DevSecOps programs.
• Define and implement security architecture standards and secure engineering practices.
• Conduct architecture reviews, threat modeling, and application risk assessments.
• Drive adoption of secure SDLC, CI/CD security, and shift-left security practices.
• Integrate security testing tools such as SAST, DAST, SCA, and IAST into development pipelines.
• Provide security guidance for cloud, API, container, and microservices architectures.
• Establish governance, metrics, and remediation programs for application security risks.
• Partner with engineering and leadership teams to develop security roadmaps and technology strategies.
• Support compliance and regulatory requirements including HIPAA, HITRUST, SOC 2, NIST, and ISO 27001.
• Mentor engineers and architects on secure development and security best practices.

Required Qualifications

• 12–15+ years of experience in Cybersecurity, Application Security, Security Architecture, or DevSecOps.
• Strong expertise in Secure SDLC, AppSec, Threat Modeling, Cloud Security, and DevSecOps.
• Experience leading enterprise-scale security transformation and secure engineering initiatives.
• Hands-on knowledge of CI/CD platforms, container security, API security, and cloud technologies.
• Strong understanding of technology risk management and security governance.
• Excellent stakeholder management, consulting, and communication skills.
• Ability to influence strategic decisions across business and technology functions.

Preferred Certifications

• CISSP, CSSLP, CCSP, AWS Security Specialty, Azure Security Engineer Associate, and TOGAF preferred.

Key Competencies

Security Architecture & Design, Application Security Leadership, DevSecOps Transformation, Cloud Security, Risk Management & Governance, Strategic Thinking, Executive Communication, Stakeholder Management, and Consulting Mindset.