SENIOR ARCHITECT - Penetration Testing

Job Description ? Security Architect / Technical Manager

(Threat & Vulnerability Management / Application Security Practice)

Job Summary

We are looking for a highly capable, technically strong, and leadership-oriented Security Architect / Technical Manager who can act as a key second line within the Cyber Security Practice. This role requires a strong balance of technical expertise, customer-facing consulting capability, presales support, delivery governance, strategic planning, stakeholder management, and practice leadership.

The ideal candidate should be capable of independently driving customer discussions, supporting strategic initiatives, reviewing technical deliverables, mentoring teams, managing escalations, and contributing towards overall practice growth and maturity.

Key Responsibilities

Practice Leadership & Strategic Growth

• Act as a go-to person in the absence of the Practice Head for operational, delivery, and customer-facing activities.
• Contribute towards practice growth by identifying new service opportunities, capability enhancement areas, market trends, and strategic initiatives.
• Work with leadership on practice roadmap, competency development, innovation initiatives, and service expansion plans.
• Support thought leadership initiatives through blogs, POVs, customer recommendations, and strategic consulting inputs.
• Drive process improvement initiatives and optimize delivery practices across the security portfolio.
  
  

• Support Presales activities including: Solutioning, Effort estimation, Proposal preparation, RFP/RFI responses, Technical presentations and customer discussions
• Engage with customers to understand business and security requirements and provide tailored solutions.
• Identify value-add opportunities and proactive security recommendations for customers.
• Support customer escalations and critical discussions with appropriate technical and managerial oversight.
  
  

• Manage and oversee multiple concurrent cybersecurity engagements across: Application Security, Network Penetration Testing, Cloud Security Assessments, DevSecOps, Red Teaming and Vulnerability Management Programs
• Provide delivery oversight to ensure projects are delivered on time, within scope, and with expected quality standards.
• Review technical deliverables, VAPT reports, architecture review findings, and risk assessment reports for quality and completeness.
• Conduct regular project reviews, track risks, and implement mitigation strategies.
• Maintain governance dashboards, status reports, effort tracking, and delivery metrics.
  
  

• Strong hands-on and review-level expertise in:
• Web Application Security Testing
• API Security Testing
• Mobile Application Security Testing
• Network Penetration Testing
• Infrastructure VA/PT
• SAST, DAST, and DevSecOps security concepts
• Cloud Security Assessment
• CSPM (Cloud Security Posture Management)
• AI-SPM / AI Security Posture Management concepts
• Phishing simulations and phishing tools
• Threat Modeling and Secure Architecture Review
• Source Code Review and Security Best Practices
• Security standards/frameworks including: OWASP, NIST, CIS Controls, MITRE ATT&CK, ISO 27001 and RBI Cyber Security Guidelines
  
  

• Lead, mentor, and guide technical teams across projects and initiatives.
• Foster a culture of accountability, continuous learning, innovation, and quality delivery.
• Coordinate with Sales, Delivery, PMO, Customers, and Leadership teams.
• Effectively manage stakeholder expectations, escalations, and delivery dependencies.
• Support resource planning, allocation, utilization tracking, and capability development.
  
  

• Excellent verbal and written communication skills.
• Strong leadership and stakeholder management capability.
• Strong analytical and problem-solving skills.
• Ability to work in high-pressure and challenging environments.
• Ability to manage multiple customers, priorities, and parallel delivery tracks.
• Strong ownership mindset with customer-first approach.
• Passion for continuous learning and adapting to emerging technologies and threat landscapes.
  
  

• 10?15+ years of experience in Cyber Security with strong expertise in Application Security and Network Security Testing.
• Prior experience in Technical Management, Security Consulting, or Security Architecture roles is preferred.
• Experience working with enterprise customers, BFSI clients, or large-scale managed security engagements is highly desirable.
  
  

• B.E / B.Tech / B.Sc in Computer Science, Information Technology, Cyber Security, or related field.
  
  

• CISSP, CISM, CISA, OSCP, OSWE, GXPN, GWAPT, CEH, CCSP / CCSK
  
  

• A self-driven and highly accountable security leader.
• Technically hands-on with strong consulting and leadership capabilities.
• Someone capable of independently owning customer engagements, delivery oversight, and strategic initiatives.
• An individual who can mentor teams, improve service maturity, and strengthen practice positioning in the market.
• A trusted advisor for customers, delivery teams, sales teams, and leadership stakeholders alike.