Principal Cybersecurity Architect

Security Architect – Application Security & DevSecOps

Location: Hyderabad, India  |  Experience: 12–15+ Years  |  Role Level: Principal Consultant / Security Architect

Role Summary

Seeking an experienced Security Architect to lead Application Security, Security Architecture, and DevSecOps initiatives across the enterprise. The role will drive secure-by-design practices, security governance, cloud and application security programs, and technology risk management while partnering with engineering and business leaders to strengthen security throughout the software development lifecycle.

Key Responsibilities

• Lead enterprise Application Security and DevSecOps programs.
• Define and implement security architecture standards and secure engineering practices.
• Conduct architecture reviews, threat modeling, and application risk assessments.
• Drive adoption of secure SDLC, CI/CD security, and shift-left security practices.
• Integrate security testing tools such as SAST, DAST, SCA, and IAST into development pipelines.
• Provide security guidance for cloud, API, container, and microservices architectures.
• Establish governance, metrics, and remediation programs for application security risks.
• Partner with engineering and leadership teams to develop security roadmaps and technology strategies.
• Support compliance and regulatory requirements including HIPAA, HITRUST, SOC 2, NIST, and ISO 27001.
• Mentor engineers and architects on secure development and security best practices.

Required Qualifications

• 12–15+ years of experience in Cybersecurity, Application Security, Security Architecture, or DevSecOps.
• Strong expertise in Secure SDLC, AppSec, Threat Modeling, Cloud Security, and DevSecOps.
• Experience leading enterprise-scale security transformation and secure engineering initiatives.
• Hands-on knowledge of CI/CD platforms, container security, API security, and cloud technologies.
• Strong understanding of technology risk management and security governance.
• Excellent stakeholder management, consulting, and communication skills.
• Ability to influence strategic decisions across business and technology functions.

Preferred Certifications

CISSP, CSSLP, CCSP, AWS Security Specialty, Azure Security Engineer Associate, and TOGAF preferred.

Key Competencies

Security Architecture & Design, Application Security Leadership, DevSecOps Transformation, Cloud Security, Risk Management & Governance, Strategic Thinking, Executive Communication, Stakeholder Management, and Consulting Mindset.