Security Architect - Bengaluru

Role Overview

Required Experience

• 8+ years of experience in security engineering, security architecture, or a closely related field.
• Proven experience securing production systems at scale.
• Hands-on expertise in application code, cloud infrastructure, API security, IAM, network segmentation, secrets, containers, workloads, and infrastructure as code.
• Deep knowledge of application and API security, including access control, injection, SSRF, authentication, authorization, and secure design.
• Experience with threat modeling, secure design reviews, secure SDLC, CI/CD security, dependency security, and container security.
• Understanding of SOC 2, ISO/IEC 27001, GDPR, and related security and privacy requirements.
• Experience leading certification, enterprise customer, and regulatory audits through remediation.
• Strong stakeholder and customer communication skills with balanced risk judgment.

Preferred Qualifications

• Experience with personal, identity, or biometric data is preferred.
• Experience in fintech, regtech, identity verification, or another regulated domain is preferred.
• Penetration testing, red teaming, vulnerability research, or DevSecOps experience is preferred.
• CISSP, CCSP, OSCP, CIPP, CIPT, or similar certifications are valued.
• Experience mentoring or leading engineers is preferred.

Responsibilities

• Own security architecture across cloud infrastructure, applications, and APIs.
• Identify, prioritize, remediate, and validate security issues with engineering teams.
• Perform threat modeling and security design reviews.
• Embed security into coding, code review, CI/CD, dependency, and container practices.
• Maintain security standards, reference architectures, and hardening baselines.
• Lead penetration testing, vulnerability management, audit evidence, control mapping, and remediation.
• Support customer security reviews, regulatory requirements, privacy work, incident response, and post-incident improvements.
• Mentor engineers and help build and manage the security team while remaining hands-on.

Company Context

Interview Process

• The process includes an introductory discussion, security deep dive and practical assessment, a further security deep dive, and founder and culture alignment.