Security Architect

Tata Group; Hyderabad; On-site; INR 3,200,000 - 7,000,000; Full time

Job summary

Tata Group in Hyderabad, India is seeking a Senior Application Security Architect to lead secure design and threat modeling across software teams. You will drive security across CI/CD pipelines, API security, and cloud-native architectures, partnering with engineering leadership to balance risk with business outcomes.

The ideal candidate has 12+ years in security, with 6+ in security roles and 3+ as a security architect, plus certifications relevant to application security and cloud security.

Qualifications

• Bachelor's degree in computer engineering, cybersecurity, or related field.
• Master's degree preferred.
• Typically 12+ years of related experience, including at least 6 years in security, 3 years in defensive application security and as a security architect.
• Experience designing and reviewing secure application and API architectures, including threat modeling.
• Experience driving the implementation of application security tooling (SAST, DAST, SCA, API security, secrets management).
• Experience integrating security into CI/CD pipelines and developer workflows.
• Experience with cloud-native architectures (microservices, Kubernetes) as they relate to application security.
• Experience presenting and influencing at engineering leadership and executive level.
• Experience working across globally distributed teams to drive security outcomes.

Skills

NIST CSF

CIS Controls

OWASP SAMM

ASVS

Top 10

ATT&CK

Identity design

Education

Bachelor's degree

Master's degree preferred

Job description

Requirements:

• Bachelor's degree in computer engineering, cybersecurity, or a related field.


• Master's degree preferred.


• Typically 12+ years of related experience, including at least 6 years of experience in a security role, 3 years of experience in a defensive application security role and working directly with software engineering teams, and 3 years of work experience as a security architect.


• Experience designing and reviewing secure application and API architectures, including threat modeling.


• Experience driving the implementation of application security tooling (SAST, DAST, SCA, API security, secrets management).


• Experience integrating security into CI/CD pipelines and developer workflows.


• Experience with cloud-native application architectures (e. g., microservices, Kubernetes) as they relate to application security.


• Experience presenting and influencing at the engineering leadership and executive level.


• Experience working effectively within a globally distributed organization, collaborating across time zones, cultures, and functional teams to drive consistent security outcomes.

Skills and Abilities:

• Practical knowledge of control frameworks such as the NIST CSF, Center for Internet Security's Critical Security Controls (v8), OWASP SAMM, ASVS, and Top 10


• Practical knowledge of the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT& CK) framework.


• Knowledge of identity, authentication, authorization, and secure API design.


• Strong risk management mindset with the ability to balance security and business outcomes.


• Ability to communicate complex technical concepts to non-technical audiences.


• Excellent problem-solving, analytical, and collaboration skills.


• Demonstrated commitment to ethical standards and a diverse, inclusive workplace.

Licenses and Certifications:

• At least one certification related to application security or secure development (e. g., CSSLP, GWEB, CASE).


• General cloud or Kubernetes security certification preferred (e. g., CKS, CCSK, CCSP, GCSA).


• General security certification preferred (e. g., CISSP, GIAC).


• General security architecture certification preferred (e. g., SABSA SCF, ISSAP).


• Cloud and container certifications are preferred but are not the primary focus.