Sr. Application Security Architect

Systems Plus; Pune District; On-site; INR 250,000 - 420,000; Full time

Job summary

Systems Plus in Pune, India is seeking a Sr. Application Security Architect with 8–12 years in cybersecurity and at least 4+ years hands-on in app security. You will lead security assessments, architecture reviews, threat modeling, and secure SDLC integrations.

You will work with cloud platforms (AWS/Azure), microservices, containers, and APIs, translating findings into risk and remediation roadmaps while coordinating with development and security teams for US-based stakeholders.

Qualifications

• 8–12 years in Cybersecurity and Application Security.
• 4+ years hands-on in app security, security assessments, and architecture.
• Expertise in threat modeling and OWASP frameworks.
• Experience with SAST/DAST/SSVC tools and secure SDLC.

Responsibilities

• Conduct security assessments of web apps, APIs, mobile apps, and enterprise platforms.
• Lead architecture reviews and provide security recommendations.
• Collaborate with Dev and Sec teams to drive remediation.

Skills

Threat modeling

OWASP Top 10

Secure SDLC

Cloud security

CI/CD security

Kubernetes

Secrets management

Communication skills

Tools

SAST

DAST

SCA

API security tools

Job description

HIRING www.systems-plus.com

Sr. Application Security Architect

Location: Pune
Employment Type: full-time
Designation: Sr. Application Security Architect

Job Details

Role: Application Security Architect

• 8–12 years of overall experience in Cybersecurity and Application Security, with at least 4+ years of hands‑on experience in application security, security assessments, and security architecture.
• Strong experience performing application security assessments and identifying security risks across web applications, APIs, mobile applications, and enterprise platforms.
• Deep expertise in threat modeling, with the ability to assess systems from an attacker's perspective and identify potential attack paths and security weaknesses.
• Strong experience conducting application and security architecture reviews and providing security recommendations during solution design and implementation.
• Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP API Security Top 10, and secure software development principles.
• Experience with attack surface analysis, abuse cases, data-flow analysis, security design reviews, and threat modeling methodologies.
• Strong understanding of common application security vulnerabilities, including broken authentication, broken access control, injection, insecure APIs, session management issues, cryptographic weaknesses, and application misconfigurations.
• Good understanding of penetration testing and red-team methodologies, with a strong attacker mindset; however, this is not a dedicated penetration testing role.
• Hands‑on experience with SAST, DAST, SCA, API security tools, vulnerability scanning, secrets scanning, and other application security testing technologies.
• Strong knowledge of secure application architecture, including authentication, authorization, API security, encryption, secrets management, session management, and secure integration patterns.
• Experience implementing or supporting Secure SDLC and DevSecOps, including the integration of security controls into CI/CD pipelines.
• Strong understanding of modern application environments, including cloud platforms such as AWS and/or Azure, microservices, containers, Kubernetes, and APIs.
• Ability to work closely with development, infrastructure, enterprise architecture, and cybersecurity teams to prioritize and drive remediation of security risks.
• Ability to translate technical security findings into clear risk assessments, security requirements, architectural recommendations, and remediation roadmaps.
• Strong communication, documentation, and stakeholder management skills, with the ability to independently work as part of a long‑term dedicated security team supporting US‑based stakeholders.

word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word word mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1
mmMwWLliI0fiflO&1