Software Security Architectural Expert

We are currently seeking an experienced Application Security Expert to lead our security testing, vulnerability management, and threat mitigation efforts.

This role involves securing applications, mobile platforms, APIs, and cloud environments while ensuring compliance with industry standards and regulations. The ideal candidate will have strong expertise in security testing, cloud security, DevSecOps integration, and security architecture, with a proven ability to mentor teams and lead secure development practices.

Key Responsibilities:

• Security Testing: Perform Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Interactive Application Security Testing (IAST), mobile, and API security testing to identify and resolve vulnerabilities.
• Vulnerability Management: Conduct Vulnerability Assessment and Penetration Testing (VAPT), prioritize vulnerabilities, and mitigate risks using threat modeling and OWASP ASVS.
• Cloud Security: Secure AWS and Azure environments, ensuring compliance with CIS Benchmarks and GDPR/HIPAA.
• Compliance & Regulations: Ensure compliance with Payment Card Industry Data Security Standard (PCI DSS), Health Insurance Portability and Accountability Act (HIPAA), General Data Protection Regulation (GDPR), and other security frameworks.
• DevSecOps Integration: Integrate security into Software Development Life Cycle (SDLC), automate security checks within Continuous Integration/Continuous Deployment (CI/CD) pipelines using Jenkins and Azure DevOps.
• Security Architecture: Design secure application architectures and advocate secure coding practices across teams.
• Leadership & Training: Lead security assessments, mentor junior team members, and conduct security awareness workshops.

Requirements:

Technical Proficiency:

• Legacy: Java, .NET; Modern: React, Node.js, Python, PHP, Ruby/Rails, and Angular.
• CMS: Magento-Adobe, and Avocode.

Cloud Skills: Expertise in AWS and Azure.

Security & Compliance: Knowledge of OWASP Top 10, OWASP ASVS, PCI DSS, HIPAA, GDPR, NIST, and CIS Benchmarks.

Security Testing Expertise: Proficiency in SAST, DAST, IAST, penetration testing, and threat modeling.

DevSecOps & SDLC Integration: Experience in embedding security in CI/CD pipelines and secure SDLC practices.

Soft Skills: Strong communication, leadership, and collaboration skills.

Preferred Certifications:

• CompTIA Security+, CEH, GWAPT, AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate.

About the Opportunity:

• Award-Winning Workplace: Certified as a Great Place to Work and recognized by ET NOW as the Best Organization for Women.
• Proven Engagement: Industry-recognized client and employee Net Promoter Scores (NPS).
• Growth-Focused Culture: Equal-opportunity employer with a strong emphasis on leadership development, training, and continuous learning.
• Flexible & Supportive Environment: We value empathy, recognize contributions, and support work-life balance.
• Transparent Leadership: Open-book management with a collaborative, inclusive approach.
• Rapid Growth: 850+ professionals strong and on track to reach 3000+ employees — an exciting time to join.

About Our Company:

We are North America's fastest-growing independent digital quality engineering services company. With a diverse portfolio of digital transformation services encompassing Quality Engineering, Digital Engineering, Advisory and Transformation, and Emerging Technology Testing, we empower organizations of all sizes globally to achieve quality excellence and sustainable market leadership. Trusted by 70+ global enterprises and with a headcount of 850+ elite software quality engineers, we are pioneering AI-enabled Quality Engineering innovation. We have consistently maintained an outstanding client Net Promoter Score (NPS) of over 75, reflecting our unwavering commitment to client satisfaction and service excellence.