Architect SSDLC

Job Title

Security Architect - Application Security - SSDLC

Reporting Structure

Reports to Chief Manager or AVP

Education

BE/BCA/BTECH/ or any IT Graduate/Post Graduate from government authorised university

Experience/ Qualifications

• Excellent written and verbal communication skills in English high integrity strong work ethic and ability to empathize with the customer.
• At least 8 years of Cyber Security experience with 3 years specifically in Security Architecture in large organization Bank or global IT or consulting firm.
• Strong background of Application Security Secure Software Development Lifecycle (SSDLC).
• Experience in Threat Modelling Application Architecture Review Security Architecture Documentation Security Testing - SCA SAST & DAST.
• Exposure of security tools integration in DevOps architecture.
• Exposure of Microservices security API security and AI security.
• Exposure implementation of evaluation and implementation of Application Security & Testing tools.
• Troubleshooting and problem-solving ability including analytical thinking and strong attention to details.
• Good understanding of Application Security Standards like OWASP SANS NIST MAITRE etc.
• Good understanding of Security by Design and Privacy by Design principles.
• Good understanding of privacy compliance requirements and privacy controls at application and database layers.
• Good understanding of compliance requirements for payment and nonpayment applications.
• Product & platform security assessment exposure is desirable.
• Understanding of Load Balancer WAF CDN API Gateway Secrets Management etc. is desired.
• Exposure of cloud application (SaaS) security solutions is desirable.
• Good understanding of encryption tools and technologies; SSL Keys Management HSM and PKI infrastructure and secrets management.
• Ability to take assess solution and recommend proactive steps to mitigate Network OS and Application Layer Security attacks.

Responsibilities

• Subject Matter Expert for Application Product and Platform Security and define the security blueprint.
• Collaborate with Business Analysts Solution Architects and Software Development Managers to embed security controls into the non-functional requirements system design development and during implementation.
• Partner with Business Analysts to translate compliance and business needs into security requirements.
• Evaluate Solution Architecture designs for security flaws and gaps.
• Define security architecture blueprints patterns and frameworks.
• Conduct threat modeling workshops during the initial design phases.
• Work alongside SSDLC team to validate that implemented code matches architectural intent.
• Assess third-party libraries APIs interconnections and infrastructure for systemic risk.
• Work on architecture & blueprint for Cyber Security solutions.
• Assessing risks and Security privacy & other relevant compliance requirements mapping for AI and other new technologies and platforms.
• Develop Microservices & API security architecture.
• Work on DevSecOps integration and automation with DevOps team.
• Drive implementation and integration new security tools such as SCA SAST DAST & IAST for application security testing.
• Contribute to review and enhancement of security posture of network infrastructure and application layers.
• Prepare weekly/monthly service delivery reports and review with BU Head and VH.
• Provide advice on Secure coding best practices. Conduct Application Security related trainings for team and developers.
• Face internal and external audits for the scope of service delivery.
• Participate in security risk assessments and -up and transfer interdisciplinary knowledge.
• Review of effectiveness of technical security controls and preparing risk dashboards.
• Collaborate with internal and external stakeholders for timely delivery of the assigned engagements/projects.
• Reviewing the status of the projects and taking corrective/preventive measures as approved.
• Provide service delivery inputs to PMO & other relevant systems.
• Provide SME advice on security tool capabilities and configuration adjustmentswhen needed to contain security incidents or block future security attacks.
• Participate in continual improvement and benchmarking activities.
• Contribute to CoE initiatives and other activities delegated by BU Head or Vertical Head.

Certifications

ISO 27001 CISSP CISA CCSP CSSLP CEH CASE CSSD GWEB CMWPT GPEN API Security Architect

Location

Navi Mumbai

Employment Type

All positions are on fixed term contract on a full-time basis exclusively for ReBIT initially for a period of five years extendable by mutual consent