Security Architect (Bangalore, India)

About this role

Not quite right? These jobs in Bengaluru match the same skills — apply to a few to improve your chances.

Principal Engineer, Firmware Verification Engineering

Sandisk

In OfficeBengaluru

Apply

Senior Software Testing Automation

RSA Security

In OfficeBengaluru

Apply

Principal Security Engineer

Ethos Life

In OfficeBengaluru

Apply

Sr Technology Automation Engineer (Azure Cloud + Azure Devops + Terraform + AKS + Powershell + CI/CD Automation)

Assurant

In OfficeBengaluru

Apply

Skills you'll use

What you'll do

• Own the security architecture across cloud infrastructure, applications, and APIs, and evolve it as the platform grows into new products and regions.
• Work directly with engineers to identify, prioritize, and remediate security issues in infrastructure, application code, and APIs, reviewing designs, pairing on fixes, and validating that they hold.
• Perform threat modeling and security design reviews for new services and significant changes, and embed security into the development lifecycle (secure coding standards, code review, CI/CD controls, dependency and container security).
• Define and maintain security standards, reference architectures, and hardening baselines, and drive their adoption across engineering.
• Lead and coordinate security testing, including penetration tests, vulnerability management, and remediation tracking, and hold findings to closure within defined timelines.
• Translate industry and regulatory security and privacy requirements into concrete technical and organizational controls, and keep them current as obligations change.
• Own the technical side of audits and assessments, including industry and certification audits (for example SOC 2 and ISO 27001), enterprise-customer security reviews, and regulatory reviews, covering evidence, control mapping, and remediation of findings.
• Represent security in customer-facing conversations, including security questionnaires, due-diligence calls, and trust discussions with prospects, customers, and their auditors.
• Partner with the privacy and data-protection function to ensure controls meet GDPR and other applicable data protection requirements, with particular care for personal and biometric data.
• Contribute to incident readiness and response, including detection, investigation, and post-incident improvement.

Who can apply

• Partner with the privacy and data-protection function to ensure controls meet GDPR and other applicable data protection requirements, with particular care for personal and biometric data.
• Contribute to incident readiness and response, including detection, investigation, and post-incident improvement.
• As the team grows, mentor and eventually manage junior security engineers, setting technical direction, reviewing work, and developing the team.
• 7 to 9 years of experience in security engineering, security architecture, or a closely related field, with a track record of securing production systems at scale.
• Genuine hands-on technical depth. You can read and reason about application code, cloud infrastructure, and API design, and work with engineers to fix issues rather than only flagging them.
• Strong command of cloud security, including network segmentation, IAM, secrets and key management, and workload and container security, along with infrastructure-as-code.
• Deep application and API security knowledge, including the common vulnerability classes (for example access-control flaws, injection, and SSRF), secure design patterns, authentication and authorization, and secure SDLC practices.
• Solid, current understanding of industry and regulatory security and privacy requirements, such as SOC 2, ISO/IEC 27001, GDPR, and related frameworks, and the judgment to apply them proportionately.

About AiPrise

Searching for “AiPrise jobs” or “jobs at AiPrise”? You’re in the right place.