Principal Product Architect

NopalCyber; Hyderabad; On-site; INR 3,500,000 - 5,200,000; Full time

Benefits offered by this job

Competitive compensation

Growth opportunities

Job summary

NopalCyber is seeking a Principal Product Architect to own the technical architecture across our integrated product portfolio, from External Attack Surface Management to detection and response platforms. This is a hands-on, high-influence role for someone with extensive cybersecurity product experience who can translate threat insight into scalable, secure architecture.

You will set technical direction, collaborate with Product Management and Engineering leadership, and mentor architects and

Qualifications

• 12+ years of experience in software/security engineering within cybersecurity product companies.
• End-to-end cybersecurity product architecture track record.
• Strong understanding of threat landscape and MITRE ATT&CK framework.
• Experience designing cloud-native, high-velocity security telemetry systems.
• Excellent communication with engineers, product managers, and leadership.

Responsibilities

• Own end-to-end architecture for Nopal360 (MXDR, EASM, IASM) from concept to scale.
• Translate threat landscape into product/platform decisions to stay ahead of threats.
• Define standards and guardrails for data pipelines, detections, APIs, IAM, and cloud infra.
• Partner with Product Management to shape roadmap and evaluate build-vs-buy tradeoffs.
• Lead architecture reviews with engineering teams to ensure consistency and autonomy.
• Mentor senior engineers and architects, raising the technical bar across the org.
• Stay current on threat landscape and competitive products to differentiate our stack.

Skills

Cybersecurity

Product architecture

Cloud-native design

Distributed systems

Stakeholder collaboration

Mentoring

Security standards

Job description

NopalCyber makes cybersecurity manageable, affordable, reliable, and powerful for companies that need to be resilient and compliant. Managed extended detection and response (MXDR), attack surface management (ASM), breach and attack simulation (BAS), and advisory services fortify your cybersecurity across both offense and defense. AI-driven intelligence in our Nopal360° platform, our NopalGo mobile app, and our proprietary Cyber Intelligence Quotient (CIQ) lets anyone quantify, track, and visualize their cybersecurity posture in real-time. Our service packages, which are each tailored to a client’s needs and budget, and external threat analysis, which provides critical intelligence at no-cost, help to democratize cybersecurity by making enterprise-grade defenses and security operations available to organizations of all sizes. NopalCyber lowers the barrier to entry while raising the bar for security and service.

Job Description

Experience:

12+ years, including significanttime in cybersecurity product companies

AboutNopalCyber

NopalCyberis an AI-native cybersecurity company that combines offensive and defensivesecurity through its proprietary Exposure Reduction Platform and AI-poweredCyber Intelligence Quotient (CIQ) risk-scoring engine, enabling organizationsto continuously discover, validate, prioritize, detect, respond to, andremediate cyber risk across complex enterprise environments.

RoleSummary

We'relooking for a Principal Product Architect to own the technical architecturebehind NopalCyber's integrated product portfolio — from our External AttackSurface Management to Internal Attack Surface Management to detection andresponse platform. This is a hands-on, high-influence role for someone who hasspent their career inside cybersecurity product companies, understands howattackers and defenders actually operate, and knows how to translatethatunderstanding into scalable, secure, and elegant product architecture. You'llset technical direction across multiple product lines, partner closely withProduct Management and Engineering leadership, and mentor architects and seniorengineers across the org.

KeyResponsibilities

• Own end-to-end architecture forNopal360 (e.g., MXDR/SOC platform, EASM, IASM GRC tooling), from conceptthrough scale, ensuring designs are secure, resilient, and built formulti-tenant, high-volume telemetry environments.
  
• Translate a deep, currentunderstanding of the threat landscape — adversary tactics, techniques, andprocedures (TTPs), emerging attack vectors, and the evolving regulatoryenvironment — into product and platform decisions that keep NopalCyberahead of the threats it defends against.
  
• Define architectural standards,patterns, and guardrails (data ingestion pipelines, detection engines, APIdesign, identity and access controls, cloud infrastructure) that scaleacross the Nopal 360° platform.
  
• Partner with Product Managementto shape roadmap decisions, evaluating technical feasibility, securityimplications, and build-vs-buy tradeoffs for new capabilities.
  
• Lead architecture reviews anddesign decisions in collaboration with engineering teams, ensuringconsistency across services while leaving room for team-level autonomy.
  
• Evaluate and integratethird-party threat intelligence feeds, detection frameworks (e.g., MITREATT&CK), and security tooling into the product architecture.
  
• Act as a technical authority inconversations with customers, prospects, and partners on productarchitecture, security posture, and platform capabilities.
  
• Mentor senior engineers andproduct architects, raising the technical bar across the organization.
  
• Stay current on the threatlandscape and competitive product landscape, and proactively bring inideas that keep NopalCyber's products differentiated and effective.
  

WhatYou'll Bring

• 12+ years of experience insoftware/security engineering, with a substantial portion spent atcybersecurity product companies (e.g., EDR/XDR, SIEM/SOAR, vulnerabilitymanagement, CTEM, cloud security platforms).
  
• A track record of architectingcybersecurity products end-to-end — not just consuming security tools, buthaving built them.
  
• Strong, current understandingof the threat landscape: attacker TTPs, the MITRE ATT&CK framework,common attack vectors across network, cloud, identity, and applicationlayers, and how detection and response systems are designed to counterthem.
  
• Proven experience designingdistributed, cloud-native architectures that handle high-volume,high-velocity security telemetry (logs, alerts, events) with an emphais on reliability and low-latency detection.
  
• Deep knowledge of securityarchitecture principles: zero trust, defense in depth, secure-by-designdevelopment, identity and access management, and data protection.
  
• Hands-on fluency with cloudplatforms (AWS, Azure, or GCP), modern data pipelines, and API-firstdesign.
  
• Experience partnering directlywith Product Management and executive stakeholders to shape roadmap andmake architectural tradeoffs under real business constraints.
  
• Excellent communication skills— able to explain complex technical and threat concepts clearly toengineers, product managers, customers, and leadership alike.
  

Nice toHave

• Experience architecting SOCplatforms, MXDR/managed detection services, or attack surface managementtooling specifically.
  
• Prior experience in anoffensive security context (red team, penetration testing, or adversarysimulation) that informs how you think about defensive product design.
  
• Relevant industrycertifications (OSCP, CISSP, GCIA, GCTI, or similar).
  
• Experience building or scalingproducts at a high-growth cybersecurity startup.
  

What WeOffer

• The chance to shape the corearchitecture of a cybersecurity platform used to protect realorganizations, from the ground up.
  
• A close-knit, high-trust teamwhere architectural decisions have direct, visible impact.
  
• Competitive compensation,benefits, and growth path commensurate with a principal-level technicalrole.
  
• A culture built aroundNopalCyber's mission: making elite, affordable security accessible toevery organization, regardless of size.