Security Engineer – Architect
Strada
full-time
Posted on:
Location Type: Hybrid
Location: Hyderabad • India
Visit company websiteExplore more
Tech Stack
About the role
- Help develop and maintain a comprehensive application security architecture for our products that aligns with our business goals and technology landscape.
- Design and implement security solutions that leverage the latest technologies and best practices for application security.
- Translate business objectives and risk management strategies into actionable security processes for our products.
- Establish and enforce security configuration standards for application development, deployment, and maintenance.
- Develop standards for data encryption and tokenization to safeguard sensitive information within our products.
- Stay ahead of emerging threats and technologies to ensure our product security posture remains robust and adaptive.
- Lead the full migration of our application stack from AWS and legacy data centers to Azure, ensuring a seamless transition and robust security posture for our applications in the new environment.
- Spearhead the rebuilding of our product security program to enhance our defenses and align with industry best practices.
- Partner in the implementation of a comprehensive security architecture program that supports our strategic goals and operational needs for product security.
- Drive application team leaders to accept and comply with the Application Security SDLC processes.
- Work closely with product managers, developers, and other stakeholders to integrate security into all aspects of our product lifecycle.
- Assess and manage the security of third-party vendors and partners involved in product development.
- Liaise with other security professionals to share insights and best practices.
- Collaborate with the business continuity team to ensure security measures are in place during failovers and other critical events affecting our products.
Requirements
- Bachelor's or master's degree in computer science, information systems, cybersecurity, or a related field, or comparable experience.
- CISSP, CSSLP, CISA, TOGAF, GAIC, or CISM preferred.
- Hands-on experience with application security, threat modeling, secure coding practices, and vulnerability management.
- Hands on practice with AI model development and securing the DevOps infrastructure.
- Familiarity with regulations and frameworks such as HIPAA, GDPR, ISO 27001/2, and NIST CSF.
- Strong strategic planning, communication, financial analysis, and project management skills.
Benefits
- health coverage
- wellbeing programs
- paid leave (vacation, sick, parental)
- retirement plans
- learning opportunities
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
application securitythreat modelingsecure coding practicesvulnerability managementdata encryptiontokenizationAI model developmentDevOps infrastructure securitysecurity configuration standardsapplication security SDLC
Soft Skills
strategic planningcommunicationfinancial analysisproject management
Certifications
CISSPCSSLPCISATOGAFGAICCISM