Java Application Security Architect - Banking Domain

Greetings!!

Role: Security Analyst

Location: Thane / Bangalore/Chennai/Pune/NCR

Experience : 5 to 10 years

Must-Have:

1. Experience of working in Core Banking & Digital Banking environments will be preferred

2. Experience troubleshooting API security, session management, certificates, encryption, and secure token flows.

3. Working knowledge of Java or other backend languages used in Core Banking systems.

4. Familiarity with REST APIs, microservices, CI/CD pipelines, and secure deployment practices.

5. Basic understanding of cloud environments (AWS/Azure/GCP) and security controls.

6. Understanding of banking sector security regulations and data protection requirements.

7. Understanding of digital banking channels, secure API consumption, authentication protocols, and risk controls.

8. Good analytical abilities

9. Good Communication skills

10. Bachelor's degree in IT, Computer Science, Cybersecurity, or related fields.

11. Certifications preferred: CEH, Security+, or equivalents.

Required Technical Skill Set:

1. Expertise in JavaEE architecture

2. Exposure to in cloud-native architecture

3. Experience in Java Application Design and architecture along with modern technologies like Apache Kafka, Container orchestration and microservices architecture.

4. Strong knowledge of common application security vulnerabilities (OWASP Top 10, CWE/SANS, API Security Top 10).

5. Expertise in secure coding practices for Java, Spring, REST APIs, microservices.

6. knowledge of cryptography principles, digital certificates, TLS, HSM/KMS.

7. Hands on experience with SAST, DAST, SCA, IAST, container scanning tools (e.g., Fortify, SonarQube )

8. AWS/Azure security controls, IAM, VPC architecture, zero trust principles.