Application Security Risk Architect

2 days ago

Bengaluru, India SMARTWORK IT SERVICES Full time

Position : Application Security Risk Architect

Experience : 7- 9 Years

Location : Bangalore, India

Job Summary :

We're looking for a skilled and proactive Application Security Risk Architect with 7- 9 years of experience to join our team. The ideal candidate will have a primary focus on threat modeling and security architecture reviews.


You will lead the effort to identify and mitigate security risks across our application portfolio, from design to deployment. This role requires a strong understanding of secure application design, expertise with threat modeling frameworks, and the ability to embed security into the core of our development processes.

Key Responsibilities :

Threat Modeling & Security Architecture Reviews :

- Lead and conduct threat modeling sessions using industry-standard frameworks like STRIDE, PASTA, and LINDDUN.

- Perform security architecture reviews for new and existing applications, including web, mobile, APIs, and cloud-native services.

- Analyze data flow diagrams, trust boundaries, and third-party integrations to identify potential attack vectors.

- Collaborate with solution architects to integrate secure design principles and zero-trust models into all architectures.

Application Security & Vulnerability Management :

- Conduct secure design and code assessments for critical applications.

- Support the SAST (Static Application Security Testing) program, using tools like Checkmarx, Fortify, or SonarQube, and prioritize findings based on design flaws.

- Partner with development teams to guide the remediation of vulnerabilities with secure design patterns.

Governance, Awareness & Developer Support :

- Define and document secure design guidelines and best practices for development teams.

- Provide training and mentorship on threat modeling and secure architecture principles to foster a security-aware culture.

- Create security playbooks, checklists, and documentation to standardize the architecture security review process.

Required Skills & Qualifications :

Core Experience :

- 7- 9 years of experience in Application Security or Secure Software Architecture.

- At least 5 years of experience with a primary focus on Threat Modeling and Architecture Security Reviews.

Technical Proficiency :

- Strong knowledge of secure application design principles : authentication, authorization, data protection, and API security.

- Experience with threat modeling tools like the Microsoft Threat Modeling Tool or manual frameworks like STRIDE.

- Hands-on experience with SAST tools (Checkmarx, Fortify, SonarQube) and secure coding standards (OWASP, CWE).

- Familiarity with cloud security principles across AWS, Azure, and GCP.

Preferred Qualifications :

- Experience integrating secure design practices into Agile and DevOps CI/CD pipelines.

- Knowledge of compliance frameworks like OWASP ASVS, NIST 800-53, ISO 27001, and PCI DSS.

- Relevant security certifications, such as CSSLP, SABSA, CISSP, or AWS Security Specialty.

- Exposure to DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), container security, or penetration testing methodologies.

Additional Information :

- Candidates must be available for a Face-to-Face Interview at the IBM location as required.

- Day 1 Onsite Reporting is mandatory post the date of joining.


(ref:hirist.tech)

  • Application Security Risk Architect

    2 weeks ago

    Bengaluru, Karnataka, India SMARTWORK IT SERVICES Full time

    Position : Application Security Risk ArchitectExperience : 7- 9 YearsLocation : Bangalore, IndiaJob Summary :We're looking for a skilled and proactive Application Security Risk Architect with 7- 9 years of experience to join our team. The ideal candidate will have a primary focus on threat modeling and security architecture reviews. You will lead the effort...

  • Application Security Architect

    2 weeks ago

    Bengaluru, Karnataka, India TekDoors Inc. Full time ₹ 1,04,000 - ₹ 1,30,878 per year

    Job Title: Application Security Architect (AWS)Location: BangaloreDuration: Full TimeExperience: 07+ YearsJob Description:• 7+ years in application security, software engineering, or security architecture roles.• 3+ years of hands-on experience with AWS services, like IAM, KMS, CloudTrail, VPCs, CodePipeline, Terraform, etc.• Deep understanding of AWS:...

  • Application Security Architect

    2 weeks ago

    Bengaluru, Karnataka, India TekDoors Inc. Full time ₹ 1,04,000 - ₹ 1,30,878 per year

    Job Title: Application Security Architect (AWS focused)Location: Bangalore, Karnataka, IndiaType: Full TimePrimary Focus-AWS Apps Arch- Dev. background Python/Java/Go Lang, Designing, Cloud Native Exp would be required, AWS Security services (MS,VPC),CICD Awareness.Qualifications:• 8+ years in application security, software engineering, or security...

  • Application Security Architect

    1 week ago

    Bengaluru, Karnataka, India Intraedge Technologies Ltd. Full time

    Job Description : AppSec Architect (AWS)Experience : 7+ YearsLocation : Bangalore / Gurugram / NoidaPosition Overview : We are seeking an experienced Application Security Architect (AWS) to design and implement secure application architectures for AWS-hosted services and applications.The ideal candidate will have deep expertise in application security,...

  • Application Security Architect

    2 weeks ago

    Bengaluru, Karnataka, India owow Full time ₹ 1,04,000 - ₹ 1,30,878 per year

    Primary Focus- AWS Apps Arch- Dev. background Python/Java/Go Lang,Designing,Cloud Native Exp would be required,AWS Security services (MS,VPC),CICD Awareness.Design and implement application security architecture for AWS-hosted services and applications.Ensures secure-by-design initiatives across SDLC, including threat modeling, risk assessments, and...

  • Application Security Architect

    1 week ago

    Bengaluru, Karnataka, India Resmed Full time ₹ 15,00,000 - ₹ 28,00,000 per year

    Let's talk about the teamAt Resmed, the Enterprise Security team safeguards the systems, data, and technologies that enable our mission to improve lives through connected health. We collaborate across engineering, data science, enterprise architecture and business units to embed security in everything we build.Let's talk about the roleWe are seeking an...

  • Solution Architect Director

    1 week ago

    Bengaluru, Karnataka, India beBeeApplicationSecurity Full time ₹ 15,00,000 - ₹ 28,00,000

    Job Title: Solution Architect Director - Application SecurityAbout the Role:We are seeking a seasoned Solution Architect Director with expertise in application security to lead our efforts in securing our software development lifecycle.Key Responsibilities:Lead the development and implementation of application security strategies across the...

  • Security Risk Specialist

    2 weeks ago

    Bengaluru, Karnataka, India Avalara Technologies Full time

    Job Description- Perform comprehensive risk assessments aligned with Avalara s risk management framework and develop actionable remediation plans.- Analyze and identify risks across technical environments, with a focus on application design, software architecture, and security tooling configurations.- Drive the identification, management, and mitigation of...

  • Cloud Application Security Architect

    2 weeks ago

    Bengaluru, Mumbai, Pune, India Zycus Infotech Full time US$ 1,25,000 - US$ 1,75,000 per year

    Zycus is looking for a passionate Cloud Application Security Architect with 12 to 18 years of experience in End-to-End Application Security, preferably from a development background. The Cloud Security Architect leads the design and development of innovative security architectures for protecting data deployed in various cloud and hybrid cloud environments....

  • Cyber Security Architect

    1 day ago

    Bengaluru, Karnataka, India Acesoft Labs Full time ₹ 20,00,000 - ₹ 25,00,000 per year

    Key Responsibilities:Process Responsibility:• Deploy companys SDL (Secure Development Lifecycle) Prepare and present FCSR for.Net based application.• Create/Maintain central repository of security artefacts, create and own security plan updates.• Act as an expert facilitator on practices such as secure design, threat modelling, andvulnerability...