Application Security Architect

**Application Security Architect**

**Vertical**

**Cyber Security**

**Employee** **Type**

Employee

**Experience range (Years**)

09 years - 12 years

**Reporting Structure**

Reports to the Platform Software Security Services - Delivery Head

**Education**

Bachelor’s Degree in Engineering/Master Degree in Engineering in CSE/CS/IT/IT Security or Cyber Security Specialization/B.Sc/M.Sc/MCA (IT/Computer) preferred

**Experience/ Qualifications**
- Tier 1 IT companies
- IT captives of MNC Banks
- IT Product companies focused on Banking sector

2. Proven expertise in the following process areas:

- Secure SDLC Methodologies for Waterfall/ Agile software development
- Expert in Domain-driven Design (DDD) and micro service design patterns such as CQRS for technical design, Threat Modelling - PASTA ,STRIDE etc
- Comfortable working in an environment that practices Agile development, engaging Product Owner and other stakeholders
- Good knowledge of Cloud platform/VMware
- Ability to understand and develop on serverless architecture
- Expertise in designing and implementing API based platforms and architecture for similar scale and domain organizations
- Able to remediate the vulnerabilities with other architects, developers and other stake holders.

3. Strong technology know how and hands-on experience will be preferred.

4. Possesses ability to quickly understand the technical and functional aspects of the project to be able to communicate effectively with different stakeholders and also guide the team on various aspects.

5. Excellent written and verbal communication skills in English, high integrity, strong work ethic and ability to empathize with the customer.

6. Ability to work collaboratively with senior management across multiple departments

7. Ability to work effectively in a fast-paced, project-oriented environment

8. Ability to prioritize and execute tasks

9. Ability to handle sensitive and confidential information

10. Ability to handle multiple tasks simultaneously

11. Strong analytical and problem-solving skills

**Responsibilities**

1. Partner with stakeholders to define scope of work and objectives, goals, deliverables and timelines

2. Coordinate the development of requirements, business cases, estimations, Project Proposals and RFPs for cyber security services
- Designing technical solutions to address security weaknesses
- Following security best practices in performing tasks

10. Facilitate the definition of service levels and acceptance criteria for projects

11. Work with stakeholders to secure needed resources and resolve resource conflicts

12. Identify and proactively manage changes in scope to ensure that the business value of the project is still achieved

13. Escalate issues and risks and proactively takes ownership for resolution

14. Track milestones and deliverables and provide regular status reporting to all levels of stakeholders

15. Manage projects with a blend of in-house and external resources (vendors and contractors)

16. Plan and lead project governance meetings, project health checks, phase gate reviews, post project reviews and project level workshops

17. Share lessons learned and best practices across projects, building relationships with stakeholders at all levels

**Certifications**

CSSLP/CISSP/SSCP/CISM/TOGAF or equivalent certification are desirable (at least one).

Application/API Security Threat Modelling/API Security product Implementations, Specialisation or OWASP certifications or Agile Certifications are a plus

**Employment Type**

All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent

**Location**

Navi Mumbai