Product Security Architect (Threat Modeling)

JUARA IT SOLUTIONS; Chennai District; On-site; INR 3,000,000 - 5,000,000; Full time

Job summary

JUARA IT SOLUTIONS seeks a Product Security Architect (Threat Modeling) to partner with engineering and product teams across the SDLC, identifying security risks early and driving secure-by-design initiatives.

You will lead threat modeling, security reviews, and practical remediation guidance while collaborating with cross-functional teams to secure cloud-native services and applications.

Qualifications

• 5–8 years of experience in Application Security, Product Security, Security Architecture, or a related cybersecurity role.
• Strong understanding of SSDLC/SDLC.
• Hands-on experience conducting: Security Architecture Reviews, Threat Modeling, Application Security Assessments, Risk Assessments.
• Strong knowledge of OWASP Top 10, API Security, Authentication & Authorization, Cryptography, Secrets Management, Secure Design Principles.
• Experience reviewing architectures, cloud deployments, APIs, system integrations, and technical designs.
• Ability to assess security risks, prioritize findings, and provide practical remediation recommendations.
• Experience reading and understanding source code in one or more modern programming languages.
• Experience developing scripts, tools, or automation to improve security engineering processes.
• Strong documentation and technical writing skills.
• Excellent communication and stakeholder management to explain security concepts to diverse audiences.
• Experience collaborating with software engineering, product, and infrastructure teams.
• Familiarity with AWS and cloud-native architectures.

Responsibilities

• Conduct security design reviews and threat modeling for new products, applications, services, and platforms.
• Partner with engineering and product teams to identify risks and propose mitigation during design and development.
• Advise on secure architecture, secure coding practices, and implementation patterns.
• Review architectures, APIs, data flows, and deployment models to identify vulnerabilities and suggest improvements.
• Collaborate with teams building AI/ML solutions to assess security risks and secure implementations.
• Develop, maintain, and improve security standards, reference architectures, and documentation.
• Build security automation, tooling, and workflows to streamline threat modeling and security reviews.
• Perform application security assessments and assist in security investigations during development.
• Contribute to developer security enablement through documentation and workshops.
• Support security incident investigations and root-cause analyses.

Skills

Application Security

Product Security

Security Architecture

SSDLC/SDLC

Threat Modeling

OWASP Top 10

API Security

Authentication & Authorization

Cryptography

Secrets Management

Secure Design

AWS Cloud Security

Cloud-Native Security

DevSecOps

CI/CD Security

SAST

DAST

SCA

IaC Security

Security Automation

AI Security

Source Code Review

Security Documentation

Tools

SAST

DAST

SCA

IaC Scanning

Vulnerability Management Platforms

Job description

Job Title: Product Security Architect (Threat Modeling)
Experience: 5–8 Years
Job Type: Contract
Notice Period: Immediate to 15 Days
Work Location: Remote

About the Role

We are seeking an experienced Product Security Architect (Threat Modeling) to join our Product Security Architecture team. In this role, you will partner with engineering and product teams throughout the Software Development Lifecycle (SDLC) to identify security risks early, perform threat modeling, conduct security architecture reviews, and provide practical security guidance.

You will play a key role in helping development teams design secure applications and cloud-native services by embedding security into the product development process. This position is ideal for a security professional who enjoys collaborating with cross-functional teams, solving complex technical challenges, and driving secure-by-design initiatives.

Key Responsibilities

• Conduct security design reviews and perform threat modeling exercises for new products, applications, services, and platform capabilities.
• Partner with software engineering and product teams to identify security risks and recommend practical mitigation strategies during the design and development lifecycle.
• Serve as a trusted security advisor by providing guidance on secure architecture, secure coding practices, and implementation patterns.
• Review application architectures, system designs, APIs, data flows, infrastructure, and deployment models to identify security vulnerabilities and recommend secure design improvements.
• Collaborate with engineering teams developing AI and Machine Learning solutions to assess emerging security risks and recommend secure implementation practices.
• Develop, maintain, and improve security standards, reference architectures, best practices, and technical documentation.
• Build or enhance security automation, tooling, and workflows to streamline threat modeling, architecture reviews, and security assessments.
• Perform application security assessments and assist in investigating security concerns identified during software development.
• Contribute to developer security enablement through documentation, workshops, office hours, and security awareness initiatives.
• Support security incident investigations and conduct root cause analysis for application security issues.
• Work closely with Product Security, Engineering, DevOps, Cloud, and Infrastructure teams to integrate security into the Software Development Lifecycle (SDLC).

Required Skills & Experience

• 5–8 years of experience in Application Security, Product Security, Security Architecture, or a related cybersecurity role.
• Strong understanding of Secure Software Development Lifecycle (SSDLC/SDLC).
• Hands-on experience conducting:
• Security Architecture Reviews
• Threat Modeling
• Application Security Assessments
• Risk Assessments
• Strong knowledge of:
• OWASP Top 10
• API Security
• Authentication & Authorization
• Cryptography
• Secrets Management
• Secure Design Principles
• Experience reviewing application architectures, cloud deployments, APIs, system integrations, and technical designs.
• Ability to assess security risks, prioritize findings, and provide practical, business-focused remediation recommendations.
• Experience reading and understanding source code in one or more modern programming languages.
• Experience developing scripts, tools, or automation to improve security engineering processes.
• Strong documentation and technical writing skills.
• Excellent communication and stakeholder management skills with the ability to explain complex security concepts to technical and non-technical audiences.
• Experience collaborating with software engineering, product, and infrastructure teams.
• Familiarity with modern cloud platforms, preferably AWS, and cloud-native application architectures.

Preferred Skills

• Experience with threat modeling methodologies such as:
• STRIDE
• PASTA
• Attack Trees
• MITRE ATT&CK (preferred)
• Familiarity with AI-assisted software development, AI-powered applications, and AI security considerations.
• Experience creating developer-facing security documentation, secure coding standards, and architectural guidance.
• Knowledge of security tools including:
• SAST
• DAST
• Software Composition Analysis (SCA)
• Infrastructure as Code (IaC) Scanning
• Vulnerability Management Platforms
• Exposure to DevSecOps practices and CI/CD security integration.

Technical Skills

• Product Security Architecture
• Threat Modeling (STRIDE, PASTA)
• Secure SDLC / SSDLC
• Application Security
• Security Architecture Review
• Risk Assessment
• Secure Design Principles
• OWASP Top 10
• API Security
• Authentication & Authorization
• Cryptography
• Secrets Management
• AWS Cloud Security
• Cloud-Native Security
• DevSecOps
• CI/CD Security
• SAST
• DAST
• SCA
• IaC Security
• Security Automation
• AI Security
• Source Code Review
• Security Documentation

Soft Skills

• Excellent communication and presentation skills
• Strong analytical and critical thinking abilities
• Problem-solving and risk assessment skills
• Cross-functional collaboration
• Technical mentoring and stakeholder engagement
• Strong documentation and technical writing skills
• Ability to influence engineering teams on secure design decision.