Security Architect – Technical Team Lead

• Define and maintain reference architectures, security patterns, and design standards across cloud, application, network, identity, and data layers
• Lead threat modeling for new products, major features, and infrastructure changes
• Translate threat-model findings into prioritized engineering work
• Serve as security design authority in architecture reviews and document accepted risk
• Design identity and access architecture covering SSO/SAML/OIDC, privileged access, service authentication, secrets management, and least privilege
• Own SIEM and security data platform architecture, including log onboarding, pipelines, normalization, schemas, retention, and cost discipline
• Lead technical investigation, containment, root-cause analysis, postmortems, and systemic fixes for high-severity incidents
• Architect data protection controls including encryption, key management, tokenization, classification-driven handling, and data residency
• Define secure SDLC architecture with SAST/DAST/SCA, IaC scanning, pipeline guardrails, and policy-as-code
• Establish detection and response architecture requirements for logging, telemetry, SIEM data models, and alerting
• Evaluate security tooling, run proofs of concept, and own build-vs-buy technical cases
• Map architecture to SOC 2, ISO 27001, PCI DSS, GDPR, and India DPDP Act obligations
• Maintain the security architecture roadmap and technical debt register
• Provide day-to-day technical leadership for the India-based security team

• 10+ years in information security, with 5+ years in a security architecture or senior security engineering role
• 3+ years leading technical teams, including mentoring senior engineers
• Incident response experience as technical lead on high-severity incidents, including scoping, containment, and postmortem ownership
• Hands-on penetration testing experience covering web, API, and cloud penetration tests and report writing
• Practical understanding of LLM and agentic system threat models, guardrail design, and AI red teaming
• Strong application security depth, including secure code review, OWASP Top 10, API Security Top 10, threat modeling, and secure SDLC integration
• Deep hands-on expertise in at least one major cloud platform, plus container/Kubernetes security and infrastructure-as-code
• Hands-on SIEM and security operations experience, including data onboarding, parsing, and query authoring
• Enterprise-scale identity, network segmentation, or data protection architecture experience
• Working fluency with at least two compliance frameworks and experience designing auditable controls
• Scripting/automation capability in Python, Go, or equivalent
• Track record of influencing engineering teams without direct authority
• Strong written communication for design documents, risk narratives, and penetration test reports
• Proven experience working with US-based business teams
• Ability to work within core US business hours/time zone expectations, with Eastern Standard Time overlap
• Quiet, dedicated workspace and reliable internet connection with minimum speed of 50 Mbps
• Preferred: AI-assisted penetration testing experience
• Preferred: Offensive security certifications such as OSCP, OSWE, OSEP, GPEN, or GWAPT
• Preferred: Architecture certifications such as CISSP, CCSP, SABSA, or cloud-specific architect credentials
• Preferred: AI security credentials or contributions
• Preferred: Experience in a distributed, multi-region organization with significant India engineering presence
• Preferred: STRIDE or PASTA threat modeling and zero-trust architecture implementation

• Medical insurance
• Accident insurance
• Retiral benefits
• 12 company-paid holidays
• 2 flexible holidays
• Privilege/earned leave
• Casual/sick leave
• Paid maternity and paternity leaves
• Weekly wellness events