Chief Security Strategist

About the Role:

This is an exciting opportunity to join a leading organization as a Senior Security Architect. The ideal candidate will have expertise in designing and implementing secure architectures for cloud-based systems, as well as experience in security engineering and risk management.

The successful candidate will be responsible for developing and maintaining comprehensive security policies and procedures, collaborating with cross-functional teams to identify and mitigate potential security risks, and ensuring compliance with regulatory requirements.

• Key Responsibilities:

• Application Security:

• Develop and maintain application security best practices, including secure coding standards, code reviews, and vulnerability assessments.
• Collaborate with development teams to integrate security into the software development lifecycle (SDLC), ensuring that security is embedded into every stage of the build, deploy, and delivery processes.
• Partner with engineering teams to define and enforce secure design patterns, including secure authentication, access control, and session management.
• Continuously monitor and remediate vulnerabilities in source code and dependencies using static application security testing (SAST) and dynamic application security testing (DAST).

• Cloud & Infrastructure Security:

• Design and implement secure configurations for cloud environments, including identity and access management (IAM), encryption, and logging.
• Implement and manage security services such as GuardDuty, Inspector, and Security Hub.
• Develop and enforce infrastructure-as-code (IaC) security controls using tools like Terraform, CloudFormation, or policy-as-code frameworks.
• Lead efforts in runtime protection, including workload scanning, intrusion detection, and anomaly alerting.

• Security Architecture & Best Practices:

• Champion a shift-left approach to security, collaborating with developers early in the SDLC and providing actionable feedback during design, build, and review phases.
• Collaborate with product managers and infrastructure leads to ensure security is embedded into architectural decisions, particularly for high-risk features or regulated workflows.
• Define and promote secure defaults, least-privilege access, and zero-trust architectural principles.

• Governance, Risk & Compliance:

• Support compliance initiatives by building and documenting enforceable security controls.
• Work with auditors and risk teams to demonstrate maturity of security processes and ongoing improvements.

Requirements:

• 8+ years of experience in security engineering with a primary focus on application and cloud security
• Proficiency with programming languages like Java, Python, JavaScript, and web technologies (e.g., HTML, CSS, SQL)
• In-depth knowledge of application security vulnerabilities, threat modeling, and SDLC integrations
• Deep familiarity with cloud security architecture and services (AWS - IAM, VPC, KMS, GuardDuty, CloudTrail, etc.)
• Experience with DevSecOps tools and practices, including SAST, DAST, container scanning, and infrastructure scanning
• Hands-on experience in implementing industry best practices in access control, encryption, and security observability
• Excellent communication skills, with the ability to collaborate across engineering, product, and compliance teams
• Bachelor's degree in Computer Science, Information Security, or a related field

• Preferred Qualifications:

• Certifications in security engineering, cloud security, or a related field
• Experience with security automation and orchestration tools
• Knowledge of artificial intelligence and machine learning concepts