Product Security Architect

OMEGA, Inc.; Chennai District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

OMEGA, Inc. is seeking a Security Architect to lead security architecture initiatives across web, desktop, SaaS, cloud, embedded, and firmware solutions. The role involves guiding product teams in creating risk analyses and driving security decisions throughout the product lifecycle.

The ideal candidate possesses a Bachelor's or Master's degree in computer science or cyber security, coupled with proven experience in security architecture and excellent communication skills to collaborate effectively with teams and stakeholders.

Qualifications

• Proven experience in security architecture across multiple product types.
• Deep understanding of security concepts.
• Hands-on experience in Threat Modelling and Risk Analysis.
• Excellent communication skills to engage teams and stakeholders.

Responsibilities

• Guide teams in risk analyses and Threat Modelling.
• Mentor on secure software architecture principles.
• Review source code for vulnerabilities.
• Ensure compliance with relevant security standards.

Skills

IAM

Secure access

Secure boot

Secure coding practices

Threat Modelling (STRIDE)

Risk Analysis (TARA)

Vulnerability hunting

Source code reviews

Communication

Education

Bachelor's or Master's degree in computer science, cyber security, or another engineering discipline

Tools

C++

Java

Linux

Android

Job description

Role Overview

As a Security Architect at HBK, you will lead security architecture initiatives across our diverse product portfolio, including web, desktop, SaaS, cloud, embedded, and firmware solutions. You will act as a trusted advisor and hands‑on expert, ensuring secure‑by‑design principles are embedded throughout the product lifecycle.

Key Responsibilities

• Consult and Assist: Guide multiple product teams in creating risk analyses (e.g., TARA) and performing Threat Modelling using STRIDE or product‑relevant methods.
• Enable Secure Design: Mentor teams on secure software architecture principles and best practices.
• Process Integration: Adapt software development processes to leverage modern security tools (e.g., Static Code Analysis, Fuzzing, Security Testing Frameworks).
• Drive Security Decisions: Influence project decisions to implement robust security measures across products.
• Code & Config Review: Actively review source code and configurations for vulnerabilities; train teams to prevent recurring issues.
• Hardware Security: Provide guidance on hardware security measures and Secure Hardware Modules (SHM).
• Cryptography: Ensure correct application of basic cryptographic techniques for data protection.
• Compliance Alignment: Support adherence to relevant standards such as ISO 21434 (Automotive), IEC 62443 (Industrial), NIST SP 800, EU CRA, and ISO 27001.

Qualifications

• Education: Bachelor's or Master's degree in computer science, cyber security, or another engineering discipline.
• Experience: Proven experience in security architecture across multiple product types (web, desktop, SaaS, cloud, embedded, firmware).
• Technical Knowledge: Deep understanding of security concepts such as IAM, secure access, secure boot, secure on‑board communication, encryption, and secure coding practices.
• Threat Modelling: Hands‑on experience in Threat Modelling (STRIDE), Risk Analysis (TARA), vulnerability hunting, and source code reviews.
• Standards Familiarity: Knowledge of recognized security standards and regulations including EU CRA, CSMS, UNECE R156/R157, ISO 21434, IEC 62443, ISO 27001, and NIST SP 800 series.
• Software Development: Strong background in modern development (C++, Java) on Linux/Android platforms.
• Cryptographic Fundamentals: Understanding of cryptographic techniques and secure hardware concepts.
• Engineering Expertise: Proficiency in system and software engineering, requirement engineering, and requirement‑based development.
• Leadership: Proven experience leading engineering teams and managing customer‑facing projects.
• Communication: Excellent communication skills to engage engineering teams, customers, and stakeholders effectively.