Join our dynamic team as a Security Architect, focusing on defining and implementing robust cloud security frameworks. This role is pivotal in ensuring our cloud infrastructure meets stringent business requirements and performance benchmarks. You will be instrumental in documenting the deployment of cloud security controls and facilitating the transition to managed cloud security operations. This is an opportunity to shape the security posture of cutting-edge cloud environments.

This position requires a minimum of 4 years of specialized experience in application security, vulnerability assessment, and penetration testing. We are seeking individuals with a strong understanding of emerging threats, vulnerability research, and best practices for secure software development lifecycles. Your expertise will be crucial in protecting critical business assets in an evolving threat landscape.

Define and architect cloud security frameworks that align with business needs and performance objectives. Document the implementation of cloud security controls and manage the transition to cloud security operations. Conduct comprehensive vulnerability assessments and penetration tests across web, mobile, API, cloud, and network environments. Analyze emerging threats and risks through dedicated security research. Perform threat modeling, security code reviews, and vulnerability testing activities. Identify, validate, and document security vulnerabilities with clear remediation recommendations. Support the integration of secure software development lifecycle (SSDLC) practices. Collaborate with development and operations teams to embed security into DevSecOps and CI/CD pipelines. Utilize industry-standard security tools for detailed security assessments. Contribute to risk assessments and security reviews to enhance application and infrastructure security. Address security findings and implement corrective actions in collaboration with cross-functional teams. Share security knowledge and drive continuous improvement initiatives within the team.

A minimum of 4 years of experience in Security Research, Security Consulting, Security Assessments, and Penetration Testing is essential. Proven expertise in application security, web application security, mobile application security (Android & iOS), API security, cloud security, and network security. Hands-on experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Threat Modeling. Proficiency with industry-standard security assessment and penetration testing tools, including Burp Suite, Metasploit, Nessus, Fortify SCA, and others. Familiarity with DevSecOps practices and CI/CD tools like Jenkins. Strong knowledge of cybersecurity standards and frameworks such as PCI DSS, ISO 27001, NIST, OWASP, and MITRE ATT&CK. Understanding of secure coding practices and vulnerability management processes. Experience in Windows and Linux environments is required. Possession of relevant security certifications is highly preferred. Excellent written and verbal communication skills are mandatory for effective collaboration.