Senior Security Lead Security Architect

Zensar Technologies; Pune District; On-site; INR 6,000,000 - 8,000,000; Full time

Job summary

Zensar Technologies seeks an experienced security leader to head a team of testers across multiple projects in Pune, India. The role focuses on MCP security testing, AI security risks, and comprehensive assessments of Web, Mobile, and API security, with emphasis on secure code review and threat modeling.

Responsibilities include mentoring engineers, defining testing frameworks, and delivering risk reports to clients and senior stakeholders.

Qualifications

• Experience in MCP Security Testing and MCP architecture.
• Awareness of AI/MCP security risks and LLM integrations.
• Security testing across web, mobile, APIs, and MCP ecosystems.
• Knowledge of OWASP Top 10 and PCI-DSS/SOC2/ISO 27001 awareness.

Responsibilities

• Lead and mentor a team of 4-5 security professionals.
• Define and implement security testing strategies for MCP, web, mobile, and API projects.
• Oversee security assessments including MCP Security Testing, Web, Mobile, API, and Secure Code Review.
• Prepare executive risk summaries and engage in client discussions and governance meetings.

Skills

MCP Security Testing

AI Security

Web/App Security Testing

Threat Modeling

Leadership

Mentoring

Education

Bachelor's or Master's in CS/Cyber Security

Tools

Burp Suite

OWASP ZAP

MobSF

Appknox

Snyk

Checkmarx

Veracode

Fortify

Postman

Swagger

SIEM

Job description

Job Description:

Key Responsibilities

• Lead and manage a team of security testers across multiple projects.
• Define and implement security testing strategies for Web, Mobile, APIs, and MCP-based applications.
• Perform and oversee security assessments including:
  • MCP Security Testing
  • Web Application Penetration Testing
  • Mobile Application Security Testing (Android & iOS)
  • API Security Testing
  • Secure Code Review
  • Threat Modeling
• Review MCP architecture, connector integrations, tool invocation mechanisms, and AI-agent interactions for security risks.
• Identify vulnerabilities related to:
  • Prompt Injection
  • Tool Poisoning
  • Unauthorized Tool Access
  • Data Leakage
  • Excessive Permissions
  • Authentication & Authorization Flaws
  • Insecure Context Sharing
  • AI Agent Abuse Scenarios
• Conduct security reviews for AI/LLM-enabled applications and MCP ecosystems.
• Provide remediation recommendations and work closely with development and architecture teams.
• Prepare security assessment reports and executive-level risk summaries.
• Participate in customer discussions, audits, and security governance meetings.
• Mentor and guide junior security testers and security engineers.

Required Skills

MCP & AI Security

• Strong hands-on experience in MCP (Model Context Protocol) Security Testing.
• Understanding of MCP architecture, MCP servers, clients, tools, prompts, and resources.
• Experience identifying AI and MCP-specific security risks.
• Experience testing AI Agents, Copilot solutions, Agentic workflows, RAG systems, and LLM integrations.
• Knowledge of OWASP Top 10 for LLM Applications and AI Security best practices.

Application Security

• Web Application Security Testing.
• Mobile Application Security Testing (Android/iOS).
• API Security Testing.
• Secure Code Review.
• Threat Modeling and Risk Assessment.
• Authentication, Authorization, SSO, OAuth2, OpenID Connect, SAML.

Security Tools

• Burp Suite Enterprise/Professional.
• OWASP ZAP.
• MobSF. Appknox
• Snyk, Checkmarx, Veracode, Fortify or equivalent SAST tools.
• Postman, Swagger.
• SIEM and vulnerability management platforms.

Security Standards

• OWASP Top 10.
• OWASP API Security Top 10.
• OWASP Mobile Top 10.
• OWASP LLM Top 10.
• NIST Secure Development Framework.
• PCI-DSS, SOC2, ISO 27001 awareness.

Leadership Responsibilities

• Manage and mentor a team of 4-5 security professionals.
• Drive resource planning, estimations, and project execution.
• Establish security testing frameworks, processes, and governance.
• Conduct technical reviews and support practice development initiatives.
• Support presales, solutioning, and client presentations.

Preferred Qualifications

• Bachelors or Masters degree in Computer Science, Cyber Security, or related field.
• Security certifications such as:
  • CISSP
  • OSCP
  • CEH
  • GWAPT
  • CompTIA Security+
  • GIAC Certifications
• Experience working with enterprise AI solutions, Microsoft Copilot ecosystem, and MCP-based platforms is highly preferred.

Key Competencies

• Strong leadership and stakeholder management skills.
• Excellent client-facing communication.
• Security architecture and consulting mindset.
• Problem-solving and analytical thinking.
• Ability to drive multiple security engagements simultaneously.

Responsibilities

OK

Qualifications

OK

At Zensar, we’re "experience-led everything". We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.