Cyber Security Architect

Role & Responsibilities

• Act as a cybersecurity SME for products, applications, platforms and cloud services.
• Perform Threat Modeling, Threat & Risk Assessment (TRA) and security risk assessments.
• Conduct security architecture and design reviews and recommend security controls.
• Drive Secure SDLC/SSDLC and security-by-design practices.
• Guide SAST, DAST, SCA and SBOM implementation across CI/CD pipelines.
• Provide hands-on guidance for AWS/Azure Cloud, Docker/Containers and Kubernetes Security.
• Drive vulnerability assessment, remediation and penetration-testing activities.
• Support security incidents and provide technical root-cause analysis.
• Develop cybersecurity standards, secure baselines and engineering guidelines.
• Work closely with Software Engineering, DevOps, QA, Architecture and Product teams.
• Provide technical mentoring and act as a strong Individual Contributor/SME.

Preferred Candidate Profile

• 8+ years of overall experience in Cybersecurity, Software, Cloud or Platform Engineering.
• 5+ years of hands-on Product Security, Application Security or Security Architecture experience.
• Strong practical experience in Threat Modeling, TRA and Secure SDLC.
• Hands-on experience with AWS and/or Azure Cloud Security.
• Hands-on experience with Docker/Container and Kubernetes Security.
• Strong knowledge of SAST, DAST, SCA, SBOM and vulnerability management.
• Good understanding of OWASP Top 10, NIST and ISO 27001/27002.
• Strong problem-solving and independent technical ownership; this is primarily a hands-on IC role.
• Healthcare/Medical Device cybersecurity experience is an advantage.
• CISSP, CSSLP, CCSP, CKS or Azure Security certification is preferred.