Security Architect & India Technical Team Lead

PORCH INDIA PRIVATE LIMITED; India; Remote; INR 2,625,000 - 3,675,000; Full time

Benefits offered by this job

Medical insurance

Retiral benefits

Paid holidays

Remote work

Job summary

Porch Group is hiring a Security Architect & India Technical Team Lead to safeguard digital assets and drive security across cloud workloads, identities, networks, and data. You will design, implement, and maintain security measures while guiding the India security team and collaborating with cross-functional partners.

You will lead threat modeling, establish secure SDLC practices, and ensure compliance with SOC 2, ISO 27001, PCI DSS, GDPR, and DPDP.

Qualifications

• Minimum 10+ years in information security with 5+ years in security architecture or senior security engineering.
• 3+ years of leading technical teams including mentoring.
• Hands-on penetration testing experience on web/API/cloud.
• Demonstrated fluency in AI security and modern threat models.
• Strong knowledge of cloud platforms (AWS/Azure/GCP) and IAM, networking, data protection.

Responsibilities

• Define and maintain reference architectures for cloud, application, network, identity, and data layers.
• Lead threat modeling for new products and infra changes; convert findings into prioritized actions.
• Act as design authority in architecture reviews and document accepted risk.
• Own identity and access architecture incl. SSO/SAML/OIDC and least-privilege models.
• Own the SIEM and security data platform architecture including data onboarding and retention.
• Lead high-severity incident investigations and postmortems; coordinate containment and remediation.
• Define secure SDLC architecture with SAST/DAST/SCA, IaC scanning, and policy-as-code.
• Establish detection and response architecture: logging, telemetry, SIEM data model.

Skills

Security architecture

Incident response

Penetration testing

Cloud security

Python scripting

Go scripting

Compliance frameworks

Education

Bachelor's in CS/IS

Tools

SIEM tools

Kubernetes

Terraform

Job description

Porch Group is a leading vertical software and insurance platform and is positioned to be the best partner to help homebuyers move, maintain, and fully protect their homes. We offer differentiated products and services, with homeowners insurance at the center of this relationship. We differentiate and look to win in the massive and growing homeowners insurance opportunity by 1) providing the best services for homebuyers 2) led by advantaged underwriting in insurance 3) to protect the whole home As a leader in the home services software-as-a-service ("SaaS") space, we’ve built deep relationships with approximately 30 thousand companies that are key to the home-buying transaction, such as home inspectors, mortgage companies, and title companies. In 2020, Porch Group rang the Nasdaq bell and began trading under the ticker symbol PRCH. We are looking to build a truly great company and are JUST GETTING STARTED.

Job Title: Security Architect & India Technical Team Lead

Location: India

Workplace Type: Remote

Job Summary

The future is bright for the Porch Group, and we'd love for you to be a part of it as our Security Architect & India Technical Team Lead with the Information Security team. The Security Architect plays a critical role in safeguarding Porch's digital assets and reputation against security breaches, cyber-attacks, and unauthorized access. Their primary responsibility is to ensure the integrity, confidentiality, and availability of Porch information systems. As a Security Architect, you will be responsible for designing, implementing, and maintaining security measures to protect Porch's cloud workloads, identities, networks, and data. You will analyze potential security threats, develop strategies to mitigate risks, and respond to security incidents. You will also provide technical leadership to the security team and collaborate with cross-functional teams to ensure compliance with Porch's security policy and compliance requirements.

What You Will Do

• Define and maintain reference architectures, security patterns, and design standards for cloud (AWS/Azure/GCP), application, network, identity, and data layers.
• Lead threat modeling for new products, major features, and infrastructure changes; translate findings into prioritized, actionable engineering work.
• Serve as security design authority in architecture reviews — approve, reject, or condition designs, and document accepted risk with clear owners and expiry dates.
• Design identity and access architecture: SSO/SAML/OIDC, privileged access, service-to-service authentication, secrets management, and least-privilege models.
• Own the architecture of the SIEM and security data platform — log source onboarding, data pipeline and normalization, schema/data model standards, retention tiers, and cost-per-GB discipline.
• Serve as senior technical escalation for high-severity and significant incidents: lead investigation, scope compromise, direct containment, lead root cause analysis on architectural failures, and own the technical postmortem and systemic fixes.
• Architect data protection controls — encryption at rest and in transit, key management, tokenization, classification-driven handling, and data residency requirements.
• Define secure SDLC architecture: SAST/DAST/SCA integration, IaC scanning, pipeline guardrails, and policy-as-code enforcement.
• Establish detection and response architecture requirements — logging standards, telemetry coverage, SIEM data model, and alerting expectations for new systems.
• Evaluate and select security tooling; run proofs of concept, define success criteria, and own the technical case for build-vs-buy decisions.
• Map architecture to compliance obligations (SOC 2, ISO 27001, PCI DSS, GDPR, India DPDP Act) and design controls that satisfy multiple frameworks with one implementation.
• Maintain the security architecture roadmap and technical debt register; sequence remediation against business risk rather than tool findings.
• Provide day to day technical leadership for the India-based security team.

What You Will Bring

• 10+ years in information security, with 5+ years in a security architecture or senior security engineering role.
• 3+ years leading technical teams (formal or matrixed), including mentoring senior engineers.
• Incident response experience as technical lead on high-severity incidents, including scoping, containment, and postmortem ownership.
• Demonstrated hands‑on penetration testing experience — you have personally scoped and executed web, API, and cloud pen tests and written the reports, not just managed vendors.
• Fluency in AI security — practical, current understanding of LLM and agentic system threat models, guardrail design, and AI red teaming, backed by real work rather than reading.
• Strong application security depth: secure code review, OWASP Top 10 and API Security Top 10, threat modeling, and secure SDLC integration.
• Deep hands‑on expertise in at least one major cloud platform, plus container/Kubernetes security and infrastructure-as-code.
• Hands‑on experience with SIEM and security operations, including data onboarding, parsing, and query authoring, not just dashboard consumption.
• Demonstrated ownership of enterprise‑scale identity, network segmentation, or data protection architecture.
• Working fluency with at least two compliance frameworks and experience designing controls that hold up under audit.
• Scripting/automation capability (Python, Go, or equivalent) sufficient to build tooling, write exploits, and validate controls independently.
• Track record of influencing engineering teams without direct authority; strong written communication for design docs, risk narratives, and pen test reports.

Preferred

• Experience using AI to facilitate penetration testing — LLM‑assisted recon, payload generation, finding triage, or agentic offensive tooling.
• Offensive security certifications: OSCP, OSWE, OSEP, GPEN, GWAPT, or equivalent demonstrated capability.
• Architecture certifications: CISSP, CCSP, SABSA, or cloud‑specific architect credentials.
• AI security credentials or contributions — OWASP LLM Top 10 involvement, published AI red team research, CTF or bug bounty results against AI systems.
• Experience in a distributed, multi‑region organization with a significant India engineering presence.
• Background in threat modeling methodologies (STRIDE, PASTA) and zero‑trust architecture implementation.
• Proven experience working with US based business teams.
• Ability to work within core US business hours / time zone expectations - Eastern Standard Time (EST) overlap.

Working Hours

8 Hours (Excluding breaks) 4 Core US Hours Overlap (7:30pm- 11:30pm IST) 4 flexible hours (IST)

Workspace

A quiet, dedicated space to work, and a reliable internet connection with a minimum speed of 50 Mbps.

What You Will Get As A Porch Group Team Member

Pay Range*: ₹26,25,000 – ₹36,75,000 INR Annually *Please know your actual pay at Porch will reflect a number of factors among which are your work experience and skillsets, job related knowledge, alignment with market and our Porch employees, as well as your geographic location.

Our benefits package will provide you with comprehensive coverage for your health, life, and financial wellbeing. Our benefits include medical insurance, accident insurance and retiral benefits.

Our wellness programs include 12 company‑paid holidays, 2 flexible holidays, privilege/earned leave, casual/sick leave, paid maternity and paternity leaves, and weekly wellness events.

Inclusion and Diversity

Porch is committed to building an inclusive culture of belonging that not only embraces the diversity of our people but also reflects the diversity of the communities in which we work and the customers we serve. We know that the happiest and highest performing teams include people with diverse perspectives that encourage new ways of solving problems, so we strive to attract and develop talent from all backgrounds and create workplaces where everyone feels seen, heard and empowered to bring their full, authentic selves to work.

Porch is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected veteran status, or any other characteristic protected by applicable laws, regulations, and ordinances.

Company Overview

We are a leading vertical software and insurance platform and are positioned to be the best partner to help homebuyers move, maintain, and fully protect their homes. Porch differentiates and looks to win in the massive and growing homeowners insurance opportunity by: 1) Providing the best services for homebuyers 2) Being led by advantaged underwriting in insurance 3) Protecting your whole home

Values

No Jerks / No Egos

Be Ambitious

Solve Each Problem

Care Deeply

Together We Win

Other Information

In 2020, Porch Group rang the Nasdaq bell and began trading under the ticker symbol PRCH. We are looking to build a truly great company and are JUST GETTING STARTED. Today, we are a truly global team hiring for positions (many fully remote) across the United States, Mexico, and India. Our Story Our Companies Investor Relations / News