Security Architect

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Security Architect & India Technical Team Lead based in India.

• Define, maintain, and evolve reference architectures, security patterns, and technical design standards across cloud, applications, networks, identity systems, and data environments
• Lead threat modeling for new products, major features, and infrastructure changes; approve or reject solutions based on security requirements
• Design and strengthen identity architecture covering SSO, SAML, OIDC, privileged access, service-to-service authentication, secrets management, and least-privilege access controls
• Own the technical architecture of SIEM platforms and security data pipelines, including log onboarding, data normalisation, schema standards, retention policies, and ingestion cost optimisation
• Act as senior technical escalation point for high-severity security incidents; lead investigations, containment, root-cause analysis, and post-incident reviews
• Architect controls for encryption at rest and in transit, key management, tokenisation, data classification, and data residency
• Establish secure SDLC architecture and integrate SAST, DAST, SCA, infrastructure-as-code scanning, CI/CD security guardrails, and policy-as-code enforcement
• Define logging, telemetry, monitoring, and alerting requirements to improve threat detection and incident response
• Evaluate security technologies, conduct proofs of concept, and lead build-versus-buy assessments
• Map security architecture and technical controls to SOC 2, ISO 27001, PCI DSS, GDPR, and India's DPDP Act
• Maintain the security architecture roadmap and technical debt register
• Incorporate security considerations for LLMs and agentic systems, including threat modeling, guardrail design, adversarial testing, and AI red-teaming
• Provide day-to-day technical leadership to the India-based security team and mentor engineers
• Personally conduct and oversee penetration testing across web applications, APIs, and cloud environments

• At least 10 years of experience in information security, including 5+ years in security architecture or senior security engineering roles
• At least 3 years of experience leading technical teams, including mentoring experienced engineers
• Demonstrated experience as technical lead during high-severity security incidents
• Proven practical experience scoping and executing penetration tests across web applications, APIs, and cloud environments
• Current, practical understanding of LLM and agentic system threat models, security guardrails, and AI red-teaming techniques

• Fully remote position
• Required overlap with US Eastern business hours
• Collaboration with US-based business teams and distributed colleagues