Security Architect

Location: Bengaluru, Karnataka, India Full-time Partially remote **Job Summary**: **Key Responsibilities**: **1. Security Architecture and Strategy**: - Design and implement robust security architectures for cloud-based, multi-tenant SaaS solutions. - Develop and maintain security policies, standards, and guidelines to safeguard data and assets. **2. Cloud Security**: - Ensure the security of cloud infrastructures, including AWS, Azure, or Google Cloud. - Implement security controls and best practices for cloud environments. **3. Application Security**: - Develop and enforce secure coding standards and practices. - Implement and manage security measures to protect against common vulnerabilities such as SQL injection, XSS, and CSRF. **4. API Security**: - Secure APIs by implementing robust authentication, authorization, input validation, and rate limiting. - Utilize API gateways to enforce security policies and safeguard API traffic. **5. Data Security**: - Ensure data encryption at rest and in transit. - Develop and implement data loss prevention (DLP) strategies. - Enforce policies and practices for data classification, handling, and storage. **6. Compliance and Regulatory**: - Ensure compliance with SEBI regulations and other relevant legal and industry standards. - Prepare and oversee security audits, assessments, and compliance checks. **7.Risk Management**: - Conduct risk assessments to identify and mitigate security vulnerabilities. - Develop and implement risk management strategies and mitigation measures. **8. Incident Response**: - Lead incident response and management efforts in case of security breaches. - Develop and maintain incident response plans and procedures. **9. Collaboration and Communication**: - Work closely with development, operations, and product teams to integrate security into all phases of the software development lifecycle (SDLC). - Educate and train staff about security protocols, policies, and best practices **10. Technological Evaluation**: - Evaluate and implement security tools and technologies to enhance the security posture. - Stay updated with the latest security trends, threats, and technologies. **Required Qualifications**: - Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field. - 8+ years of experience in the cybersecurity domain, with a significant focus on cloud security and architecture. **Professional Skills**: - Deep understanding of security frameworks and standards like ISO 27001, SOC1/SOC2, NIST, and CIS. - In-depth knowledge of cloud security best practices and tools. - Familiarity with SEBI/RBI regulations and compliance requirements is a plus. - Proficiency in security technologies such as firewalls, intrusion detection/prevention systems, encryption, access control, identity and access management (IAM), and Security Information and Event Management (SIEM)/SOAR/XDR/MDR systems. - Experience with risk assessment, threat modeling, and vulnerability management. **Certifications (preferred)**: - Certified Information Systems Security Professional (CISSP) - Certified Cloud Security Professional (CCSP) - Certified Information Security Manager (CISM) - Certified Ethical Hacker (CEH) - AWS Certified Security - Specialty - Other relevant security or cloud certifications **Soft Skills**: - Strong analytical and problem-solving skills. - Excellent written and verbal communication skills. - Ability to work collaboratively in a team environment. - Detail-oriented and able to handle multiple projects simultaneously. **What’s in it for you?** - An attractive compensation and benefits structure that beats the market standards. - An ability to own a part of the company via ESOPs - Opportunity to work on a growing product that solves unique digital use cases for the Indian wealth management industry. - Flexible work options. Remote / Hybrid - Opportunity to work with the best brains in fintech. - Increasing your geek quotient, by attending meetups and conferences. - Grow exponentially by working in small and transparent teams. - A culture that promotes transparency and independence with a "#JustShipIt" attitude **About Cybrilla** Cybrilla is a financial infrastructure company that builds APIs from the ground up to support a variety of use cases and enable a superior digital experience for different user personas. Cybrilla's current focus is to build the underlying operating system for mutual funds. This enables AMCs / Fintech startups / Wealth management businesses to choose the product(s) that works best for them to curate an awesome experience for their customers and internal stakeholders. **About the Product** Fintech Primitives(FP) is an API platform that provides solutions to the problem statements of the Indian Mutual Fund domain. The APIs handle domain, regulatory, and technical complexities to enable customers to build different use cases in a short time. Check here to know what our cus