Product Security Architect

2 months ago

India Avalara Full time

Job Overview:


As a Product Security Architect at Avalara, you will be responsible for designing and implementing security frameworks and architectures that protect our SaaS product ecosystem. You will work closely with product development teams and DevOps teams to ensure security is built into our software from the ground up. This role focuses on safeguarding the entire product lifecycle, from design through deployment, ensuring that our customers’ data and our platform are secure from modern threats.


Key Responsibilities:


Architect secure product environments that address security concerns across our SaaS offerings, ensuring the security of all product layers, including application, data, and infrastructure.

Develop security standards, guidelines, and best practices for product development teams, ensuring security is integrated into the software development lifecycle (SDLC).

Conduct threat modeling and risk assessments for new features and services to proactively identify and address potential security vulnerabilities.

Collaborate with product managers, developers, and DevOps teams to define security requirements and ensure they are incorporated throughout the design and development process.

Perform secure code reviews and work with development teams to establish secure coding practices, including automation of security testing in CI/CD pipelines.

Oversee data security and privacy mechanisms, such as encryption, data masking, and anonymization, to ensure compliance with regulatory requirements like GDPR, HIPAA, and others.

Lead vulnerability management efforts for products, including monitoring, identifying, and remediating security flaws across applications and services.

Establish security monitoring and incident response processes for our SaaS platform, working with DevOps teams to monitor security events and respond to product security incidents.

Stay up-to-date with the latest security threats and technologies that impact SaaS platforms, ensuring proactive measures are in place to address new risks.

Lead security-related training and awareness initiatives within the product and engineering teams, helping build a security-first mindset across the organization.


Qualifications:

Education: Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, or related field. Master’s degree or security certifications (e.g., CSSLP, CISSP, CCSP) are highly desirable.


Experience:

15+ years of experience in software engineering, with a focus on product security for SaaS platforms.

Proven experience in secure software development and building security into product architectures from design to deployment.

Hands-on experience with cloud environments (AWS, Azure, GCP) and securing cloud-native applications (e.g., microservices, containerized workloads, serverless).


Technical Skills:

Strong understanding of secure coding practices, code review processes, and software vulnerability management.

Expertise in security protocols and technologies such as OAuth, OpenID, JWT, encryption (TLS, AES), and API security.

Experience with security tools for static code analysis (SAST), dynamic application security testing (DAST), and penetration testing tools.

Knowledge of container security (e.g., Kubernetes, Docker) and cloud security best practices (IAM, network security, logging, monitoring).

Familiarity with DevSecOps principles and the integration of security automation into CI/CD pipelines (e.g., Jenkins, GitLab, etc.).


Soft Skills:

Strong collaboration and communication skills, with the ability to work cross-functionally with development, product management, and DevOps teams.

Analytical mindset with the ability to assess risks and propose practical, scalable security solutions.

Excellent problem-solving skills and attention to detail.


Preferred Certifications:

Certified Secure Software Lifecycle Professional (CSSLP)

Certified Information Systems Security Professional (CISSP)

Certified Cloud Security Professional (CCSP)

GIAC Cloud Security Automation (GCSA)

  • Product Security Architect

    3 weeks ago

    India SolarWinds Full time

    Product Security Architect Location: Bangalore Overview: At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, Partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure...

  • Product Security Architect

    3 weeks ago

    india SolarWinds Full time

    Product Security ArchitectLocation: BangaloreOverview:At SolarWinds, we’re a people-first company. Our purpose is to enrich the lives of the people we serve—including our employees, customers, shareholders, Partners, and communities. Join us in our mission to help customers accelerate business transformation with simple, powerful, and secure...

  • Cloud Security Architect

    3 weeks ago

    india emagine Full time

    "Cloud Security Architect"Experience: 10+ YearsJob Location: RemoteNotice Period: Immediate to 25 days Job Description:As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT projects,...

  • Cloud Security Architect

    3 weeks ago

    India emagine Full time

    "Cloud Security Architect" Experience: 10+ Years Job Location: Remote Notice Period: Immediate to 25 days Job Description: As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT...

  • Cloud security architect

    3 weeks ago

    India Emagine Full time

    "Cloud Security Architect" Experience: 10+ Years Job Location: Remote Notice Period: Immediate to 25 days Job Description: As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT...

  • Cloud Security Architect

    2 months ago

    India emagine Full time

    "Cloud Security Architect"Experience: 10+ YearsJob Location: RemoteNotice Period: Immediate to 25 days Job Description:As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT projects,...

  • Cloud Security Architect

    2 months ago

    india emagine Full time

    "Cloud Security Architect" Experience: 10+ Years Job Location: Remote Notice Period: Immediate to 25 days Job Description: As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT...

  • Cloud Security Architect

    2 months ago

    india emagine Full time

    "Cloud Security Architect"Experience: 10+ YearsJob Location: RemoteNotice Period: Immediate to 25 days Job Description:As an Architect, you are able to analyze and understand security challenges in the Cloud. You can devise a relevant approach to maintain and keep secure our Azure ecosystem, and you can also issue security requirements for IT projects,...

  • Security Architect

    4 weeks ago

    Anywhere in India/Multiple Locations Paramount Computer Systems Full time

    Job Title: Security ArchitectAt Paramount Computer Systems, we are seeking a highly skilled Security Architect to join our team. As a Security Architect, you will play a critical role in designing, building, testing, and implementing security systems within our organization's IT infrastructure.Key Responsibilities:Security Infrastructure Design: Design and...

  • Senior security engineer

    3 weeks ago

    India System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central...

  • Senior Security Engineer

    3 weeks ago

    India System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central role...

  • Cloud Security Architect

    4 weeks ago

    India emagine Full time

    Job Title: Cloud Security ArchitectWe are seeking a highly skilled Cloud Security Architect to join our team at emagine. As a key member of our security team, you will be responsible for designing and implementing secure cloud architectures, ensuring the confidentiality, integrity, and availability of our data.Key Responsibilities:Provide technical guidance...

  • Senior Security Engineer

    3 weeks ago

    india System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central role...

  • Security Architect

    2 weeks ago

    Anywhere in India/Multiple Locations Paramount Computer Systems Full time

    Job Title: Security ArchitectAbout the Role:We are seeking a highly skilled Security Architect to join our team at Paramount Computer Systems. As a Security Architect, you will be responsible for designing, building, testing, and implementing security systems within our organization's IT infrastructure.Key Responsibilities:Security Infrastructure Design:...

  • Senior Security Engineer

    2 weeks ago

    india System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central role...

  • Senior Security Engineer

    2 months ago

    India System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central...

  • Senior Security Engineer

    3 months ago

    India System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central role...

  • Senior Security Engineer

    2 months ago

    India System Two Security Full time

    System Two Security is looking to hire a Senior Security Engineer with a wide expertise in both offensive and defensive measures in enterprise cybersecurity. The Senior Security Engineer is essential in enhancing development efforts for our flagship threat hunting product, working closely with Data Science and Data teams. This role puts you in a central role...

  • Cyber Security Architect

    2 weeks ago

    India Teliolabs Communications Inc. Full time

    About the Role:We are seeking a highly skilled Cyber Security Architect to join our team at Teliolabs Communications Inc. in India.Key Responsibilities:Provide expert advice on securing financial technology systems, applications, APIs, and databases, ensuring compliance with industry standards such as PCI DSS, ISO 27001 and local regulatory...

  • Security Architect

    4 weeks ago

    Anywhere in India/Multiple Locations Paramount Computer Systems Full time

    Job Title: Security ArchitectJob Summary:At Paramount Computer Systems, we are seeking a highly skilled Security Architect to join our team. As a key member of our IT department, you will be responsible for designing, building, testing, and implementing security systems within our organization's IT infrastructure.Key Responsibilities:Security Infrastructure...