Architect?VAPT

About the Position

What You'll Do

• Design end-to-end architectures for customer engagements across application security, application penetration testing, threat modeling, and risk-based vulnerability management.
• Define and review high-level and low-level design documents with customers and stakeholders.
• Lead implementation with customers, OEM partners, and internal teams.
• Perform current-state assessments and define transformation strategies and roadmaps.
• Conduct health checks against OEM recommendations and industry best practices and provide remediation guidance.
• Build metrics reports and dashboards for operational and executive visibility.
• Act as an L3 SME for escalations, complex troubleshooting, and design optimization.
• Support presales, RFP responses, technical workshops, and proof-of-concept initiatives.
• Mentor junior engineers and contribute to competency building and knowledge management.
• Align solutions with regulatory, compliance, and security frameworks.

Technical Expertise

• Application security, application penetration testing, threat modeling using STRIDE and PASTA, and risk-based vulnerability management.
• SAST, DAST, IAST, and SCA tooling, including Checkmarx, Veracode, Fortify, Snyk, and SonarQube.
• API security testing, secure SDLC, DevSecOps integration, vulnerability scanning, scan profile creation, prioritization, and remediation guidance.
• Application security metrics and dashboards, current-state assessment, OEM health checks, HLD, and LLD.

Required Qualifications

• 10–12 years of overall IT experience with significant focus in the relevant security domain.
• Bachelor's or master's degree in Computer Science, Information Technology, Engineering, or a related field.
• Prior customer-facing transition transformation, consulting, or architect experience.
• Excellent communication, presentation, stakeholder management, analytical, problem-solving, and decision-making skills.
• Ability to lead workshops with CXO and technical audiences.

Preferred Qualifications

• Relevant OEM and industry certifications such as CISSP, CISM, CCSP, CEH, or OEM-specific certifications.

Work Environment

• Persistent supports hybrid work and flexible hours.
• The office is described as accessibility-friendly, with ergonomic setups and assistive technologies.

About Persistent