Security Architect – Technical Team Lead

This is a fully remote position, open to applicants in India.

📋 Description

• Define and uphold reference architectures, security patterns, and design standards across cloud, application, network, identity, and data layers.

• Lead threat modeling initiatives for new products, significant features, and infrastructure modifications.

• Convert threat-model insights into prioritized engineering tasks.

• Act as the security design authority during architecture reviews and document accepted risks.

• Design identity and access architecture that includes SSO/SAML/OIDC, privileged access, service authentication, secrets management, and least privilege principles.

• Oversee the architecture of SIEM and security data platforms, comprising log onboarding, pipelines, normalization, schemas, retention, and cost management.

• Direct technical investigations, containment efforts, root-cause analyses, postmortems, and systemic solutions for high-severity incidents.

• Architect data protection mechanisms, such as encryption, key management, tokenization, classification-driven handling, and data residency.

• Define secure SDLC architecture that incorporates SAST/DAST/SCA, IaC scanning, pipeline guardrails, and policy-as-code.

• Establish requirements for detection and response architecture concerning logging, telemetry, SIEM data models, and alerting.

• Assess security tools, conduct proofs of concept, and manage build-vs-buy technical evaluations.

• Align architecture with SOC 2, ISO 27001, PCI DSS, GDPR, and India DPDP Act requirements.

• Maintain the security architecture roadmap and a register of technical debt.

• Provide daily technical leadership for the security team based in India.

⛳️ Requirements

• Over 10 years of experience in information security, with a minimum of 5 years in a security architecture or senior security engineering position.

• At least 3 years of experience leading technical teams and mentoring senior engineers.

• Incident response expertise as a technical lead on high-severity incidents, covering scoping, containment, and postmortem responsibilities.

• Practical experience in penetration testing for web, API, and cloud environments, along with report writing skills.

• Solid understanding of LLM and agentic system threat models, guardrail design, and AI red teaming.

• Strong depth in application security, including secure code review, OWASP Top 10, API Security Top 10, threat modeling, and secure SDLC integration.

• Extensive hands-on expertise with at least one major cloud platform, in addition to container/Kubernetes security and infrastructure-as-code.

• Practical experience in SIEM and security operations, including data onboarding, parsing, and query formulation.

• Experience with enterprise-scale identity, network segmentation, or data protection architecture.

• Proficiency with at least two compliance frameworks and experience in designing auditable controls.

• Scripting/automation skills in Python, Go, or similar languages.

• Proven ability to influence engineering teams without direct authority.

• Strong written communication skills for creating design documents, risk narratives, and penetration test reports.

• Demonstrated experience collaborating with US-based business teams.

• Capacity to work within core US business hours/time zone expectations, with overlap in Eastern Standard Time.

• A quiet, dedicated workspace and a reliable internet connection with a minimum speed of 50 Mbps.

• Preferred: Experience in AI-assisted penetration testing.

• Preferred: Offensive security certifications such as OSCP, OSWE, OSEP, GPEN, or GWAPT.

• Preferred: Architecture certifications like CISSP, CCSP, SABSA, or cloud-specific architect credentials.

• Preferred: Credentials or contributions in AI security.

• Preferred: Experience in a distributed, multi-region organization with a significant engineering presence in India.

• Preferred: Knowledge of STRIDE or PASTA threat modeling and the implementation of zero-trust architecture.

🏝️ Benefits

• Medical insurance.

• Accident insurance.

• Retiral benefits.

• 12 company-paid holidays.

• 2 flexible holidays.

• Privilege/earned leave.

• Casual/sick leave.

• Paid maternity and paternity leaves.

• Weekly wellness events.