Chief Cybersecurity Architect

Safeguard sensitive data, ensure compliance with regulatory frameworks, and strengthen security posture by joining our dynamic team.

• Develop enterprise-wide cybersecurity strategy, frameworks, and controls.
• Monitor, detect, and respond to cyber threats using SIEM and SOC processes.
• Conduct vulnerability assessments, penetration testing, red/blue/purple team exercises.
• Perform digital forensics, root cause analysis, and incident response lifecycle management.
• Define and enforce policies for data privacy, identity & access management, and DLP.
• Secure infrastructure across network, endpoint, application, database, and cloud environments.
• Implement security controls for cloud (AWS, Azure, GCP), containers (Docker, Kubernetes).
• Manage and tune security tools such as firewalls, WAF, IDS/IPS, EDR, SIEM, SOAR, CASB, DDoS protection.
• Work with DevOps teams to embed security in CI/CD pipelines (DevSecOps practices).
• Ensure compliance with IRDAI, RBI, GDPR, HIPAA, ISO 27001, NIST, PCI-DSS, SOC2.
• Conduct third-party/vendor risk assessments and ensure supply chain security.
• Lead business continuity & disaster recovery from a security standpoint.
• Drive security awareness programs for employees and stakeholders.

Required Technical Skills:

• Network security: firewalls, IDS/IPS, VPN, zero trust, SD-WAN, NAC.
• Endpoint security: EDR/XDR solutions (CrowdStrike, Carbon Black, SentinelOne, Microsoft Defender).
• Application security: OWASP Top 10, SAST, DAST, RASP, API security.
• Cloud security: CSPM, CWPP, CASB; secure configuration of AWS, Azure, GCP.
• Identity & access management: IAM, PAM (CyberArk, Okta, Ping, Azure AD, SailPoint).
• Data protection: DLP solutions, encryption (AES, RSA, TLS, PKI), key management, tokenization.
• Security operations: SIEM (Splunk, QRadar, ArcSight, ELK), SOAR, threat hunting, SOC operations.
• Threat & vulnerability management: Qualys, Nessus, Rapid7, Burp Suite, Metasploit.
• Incident response & forensics: EnCase, FTK, Volatility, Wireshark, memory forensics.
• DevSecOps: container scanning (Aqua, Twistlock, Snyk), CI/CD pipeline security, IaC scanning.
• Governance, risk & compliance (GRC): RSA Archer, ServiceNow GRC, ISO/NIST frameworks.

Advanced Security Areas:

• Red/blue/purple teaming: adversary simulation, MITRE ATT&CK framework.
• Malware analysis: reverse engineering, sandboxing.
• Blockchain & IoT security: secure protocols, device hardening.
• Ai/ml security: model poisoning, adversarial attacks (good-to-have for advanced roles).
• Threat intelligence: STIX/TAXII, MISP, integrating CTI feeds.

Required Qualifications:

• Bachelor's/master's in computer science, information security, or related discipline.
• Certifications (one or more preferred): CISSP, CISM, CISA, CRISC (governance & risk), CEH, OSCP, OSWE, GPEN (offensive security), CCSP, CCSK, AZ-500, AWS security specialty (cloud security), ISO 27001 LA/LI, PCI-DSS, HIPAA, GDPR compliance certifications.

Desirable Soft Skills:

• Strong analytical, troubleshooting, and documentation skills.
• Excellent communication skills to interact with business and technical stakeholders.
• Ability to handle high-pressure security incidents and provide timely resolution.
• Leadership capability for senior roles (mentoring SOC teams, driving projects).

This is an excellent opportunity for experienced cybersecurity professionals to excel in their careers while making a significant impact on the organization's security posture. We are looking for talented individuals who can help us stay ahead of emerging threats and ensure our systems remain secure. If you have a passion for cybersecurity and a strong desire to grow your career, we encourage you to apply for this exciting role.