Cybersecurity Lead - Presales

About SARC Global: SARC Global is a multidisciplinary advisory firm with 40+ years of experience, 100+ partners, 500+ professionals, and a presence across India, UK, USA, Singapore, and UAE. We are building a dedicated cybersecurity practice from the ground up, backed by strategic technology partnerships and deep BFSI client relationships, to become India’s most trusted cybersecurity advisory firm. Our operating model is built right from risk to resilience.

Role Overview SARC is seeking an experienced Solution Architect to serve as the technical and advisory face of its cybersecurity practice in client engagements. The role is pre-sales and solution-design focused - the individual will be responsible for presenting SARC's cybersecurity capabilities, designing tailored solutions, handling technical discussions with client security teams, supporting RFP responses, and managing PoC engagements across enterprise accounts. The primary responsibility is to own client pitches, technical conversation, establishing credibility, and converting the opportunity into a defined scope of work.

Key Responsibilities Client-facing Technical Leadership

• Serve as the primary cybersecurity subject matter expert in client meetings, presenting SARC's service capabilities, OEM solution portfolio, and assessment methodologies to CISOs, CIOs, CTOs, and board-level stakeholders.
• Deliver structured, tailored presentations that address the client's specific environment, regulatory obligations, and risk posture - combining technical architecture with business context to drive informed decision-making.
• Handle technical objections and competitive positioning with depth and composure, drawing on broad domain experience to address concerns across network security, endpoint, cloud, SOC, compliance, and data protection.
• Develop and maintain trusted advisor relationships with client security teams, positioning SARC as a long-term cybersecurity partner rather than a transactional vendor. Solution Design & Architecture
• Design multi-domain cybersecurity solutions in response to client requirements

spanning network segmentation, Zero Trust architecture, SOC transformation, endpoint security, cloud security posture management, API protection, and regulatory compliance.

• Develop high-level solution architectures, scope documents, and engagement frameworks during client discussions, demonstrating the ability to translate complex environments into structured remediation and transformation roadmaps.
• Map all technical recommendations to applicable regulatory frameworks - RBI IT Governance Master Direction, SEBI CSCRF, IRDAI Cybersecurity Guidelines, CERT-In Directives, and the DPDP Act 2023 ensuring that proposed solutions address compliance mandates alongside technical risk. RFP & Proposal Management
• Lead the technical design and content of RFP/RFI responses for PSU and BFSI cybersecurity engagements, including solution architecture, effort estimation, Bill of Materials, and technical differentiators.
• Coordinate with OEM partners on product pricing, licensing models, and partner-specific proposal requirements.
• Structure responses to align with evaluation criteria and scoring weightages typical of government and regulated-sector procurement processes. OEM Solution Positioning & PoC Management
• Position ColorTokens (microsegmentation) and Prophaze (WAAP / API security) within SARC's broader service narrative, presenting OEM capabilities as integrated components of a comprehensive cybersecurity programme rather than standalone product offerings.
• Define PoC scope, success criteria, and execution plans. Coordinate with OEM engineering teams during PoC delivery, manage client expectations, present findings, and develop post-PoC commercial proposals.
• Maintain a working knowledge of the OEM product roadmap, competitive landscape, deployment methodology, and technical architecture to support credible client conversations. Pre-sales Enablement
• Develop reusable presentation assets, solution frameworks, case study templates, and objection-handling guides for the cybersecurity practice.
• Support the development of SARC's assessment methodologies, service catalogues, and delivery playbooks.
• Contribute to practice strategy by identifying emerging client needs, service gaps, and opportunities for new OEM partnerships or service lines.

Domain Expertise Required The role requires demonstrated proficiency across multiple cybersecurity domains. The individual should be able to discuss each of the following areas with sufficient depth to engage credibly with specialist client teams:

• Network Security & Segmentation - Firewall architecture and policy design (Palo Alto, FortiGate, Check Point), macro-segmentation (VLANs, zones, firewall-based), and microsegmentation at the workload level (agent-based approaches). Understanding of east-west traffic risks and lateral movement containment.
• Security Operations (SIEM / SOC) - SOC operating models and maturity assessment, SIEM architecture (Splunk, Microsoft Sentinel, QRadar), SOAR platforms, detection engineering, alert tuning, and use-case development. Familiarity with SOC transformation and managed SOC service models.
• Endpoint Security (EDR / XDR / MDR) - Detection and response platforms (CrowdStrike, SentinelOne, Microsoft Defender, Palo Alto Cortex), behavioural analysis, managed detection and response models, and endpoint hardening strategies.
• Cloud Security - CSPM, CWPP, CNAPP, and cloud-native security controls across AWS, Azure, and GCP. Shared responsibility models, identity-based access management in cloud environments, and workload protection strategies.
• Threat Intelligence - Threat landscape analysis, adversary TTP mapping (MITRE ATT&CK framework), threat-informed defence strategies, and integration of threat intelligence into SOC operations and risk prioritisation.
• Application & API Security - Web application firewalls, API discovery and protection, shadow API risks, bot management, and application-layer threat mitigation. Familiarity with OWASP frameworks and secure development lifecycle concepts.
• Governance, Risk & Compliance - NIST CSF 2.0, ISO 27001:2022, CIS Controls v8, PCI DSS 4.0. Working knowledge of Indian regulatory frameworks including RBI, SEBI, IRDAI, CERT-In, and the DPDP Act 2023. Ability to map technical controls to regulatory requirements in assessment reports and client presentations.
• Assessments & Advisory - Cyber maturity assessment methodologies, gap analysis frameworks, risk quantification approaches, VAPT scoping, red team engagement design, and DPDP readiness assessments.

Qualifications & Experience

• Minimum 12 years of experience in cybersecurity, with at least 8 years in solution architecture, pre-sales consulting, or technical advisory roles.
• Demonstrated experience presenting to and engaging with CISOs, CIOs, and board-level stakeholders at Indian enterprise and regulated-sector organisations.
• Proven ability to design multi-domain cybersecurity solutions that span network security, endpoint, SOC, cloud, and compliance within a single engagement.
• Experience with RFP/RFI response processes, particularly for PSU and BFSI cybersecurity engagements, including familiarity with GeM, CPPP, technical evaluation committees, and government procurement dynamics.
• Experience managing PoC engagements - scoping, execution coordination, findings presentation, and commercial conversion.
• Excellent verbal communication skills with the ability to adapt messaging for both technical and executive audiences.
• Based in Delhi-NCR or willing to relocate. In-office role at Okhla Phase 1, New Delhi, with 30-40% client travel across India.

Preferred Certifications CISSP | CISM | CCIE Security | PCNSE | CCSE | TOGAF | SABSA | AWS / Azure Security certifications

Availability - Immediate to Max 30 days only. To Apply Please send your resume to ranu@sarc.global with the subject line: "Solution Architect — Cybersecurity Pre-sales." Kindly include a brief note (one paragraph) describing a multi-domain cybersecurity solution you designed for a client the client's challenge, the domains your solution addressed, and the outcome of the engagement.