Principal Cybersecurity Architect

Providence India; Hyderabad; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Collaborating with engineering leaders, you will guide secure engineering in cloud, API, container, and microservices architectures, establish governance, metrics, and remediation programs, and mentor teams on secure development and best practices while ensuring compliance with HIPAA, HITRUST, SOC 2, NIST, and ISO 27001.

Qualifications

• 12–15+ years of relevant cybersecurity experience with a focus on application security and DevSecOps.
• Strong expertise in secure SDLC, threat modeling, cloud security, and governance.
• Hands-on experience integrating security testing (SAST, DAST, SCA, IAST) into pipelines and driving secure engineering initiatives.

Responsibilities

• Lead enterprise Application Security and DevSecOps programs.
• Define and implement security architecture standards and secure engineering practices.
• Conduct architecture reviews, threat modeling, and risk assessments for applications.
• Drive secure SDLC adoption, CI/CD security, and shift-left security practices.
• Mentor engineers and architects on secure development and best practices.
• Partner with engineering and leadership to develop security roadmaps and technology strategies.

Skills

Secure SDLC

AppSec

Threat modeling

Cloud security

DevSecOps

CI/CD

Container security

API security

Governance & risk

Stakeholder management

Executive communication

Consulting mindset

Leadership

Job description

Job Description:

Security Architect – Application Security & DevSecOps

Location: Hyderabad, India | Experience: 12–15+ Years | Role Level: Principal Consultant / Security Architect

Role Summary

Seeking an experienced Security Architect to lead Application Security, Security Architecture, and DevSecOps initiatives across the enterprise. The role will drive secure-by-design practices, security governance, cloud and application security programs, and technology risk management while partnering with engineering and business leaders to strengthen security throughout the software development lifecycle.

Key Responsibilities

• Lead enterprise Application Security and DevSecOps programs.
• Define and implement security architecture standards and secure engineering practices.
• Conduct architecture reviews, threat modeling, and application risk assessments.
• Drive adoption of secure SDLC, CI/CD security, and shift-left security practices.
• Integrate security testing tools such as SAST, DAST, SCA, and IAST into development pipelines.
• Provide security guidance for cloud, API, container, and microservices architectures.
• Establish governance, metrics, and remediation programs for application security risks.
• Partner with engineering and leadership teams to develop security roadmaps and technology strategies.
• Support compliance and regulatory requirements including HIPAA, HITRUST, SOC 2, NIST, and ISO 27001.
• Mentor engineers and architects on secure development and security best practices.

Required Qualifications

• 12–15+ years of experience in Cybersecurity, Application Security, Security Architecture, or DevSecOps.
• Strong expertise in Secure SDLC, AppSec, Threat Modeling, Cloud Security, and DevSecOps.
• Experience leading enterprise-scale security transformation and secure engineering initiatives.
• Hands-on knowledge of CI/CD platforms, container security, API security, and cloud technologies.
• Strong understanding of technology risk management and security governance.
• Excellent stakeholder management, consulting, and communication skills.
• Ability to influence strategic decisions across business and technology functions.

Preferred Certifications

CISSP, CSSLP, CCSP, AWS Security Specialty, Azure Security Engineer Associate, and TOGAF preferred.

Key Competencies

Security Architecture & Design, Application Security Leadership, DevSecOps Transformation, Cloud Security, Risk Management & Governance, Strategic Thinking, Executive Communication, Stakeholder Management, and Consulting Mindset.