The Security Consultant is responsible for assessing, designing,
implementing, and maintaining information security controls to protect
organizational systems, networks, and data. The role ensures compliance with
security standards, manages cyber risks, and supports secure digital
transformation initiatives.

Key Responsibility:
Security Assessment & Risk Management
Architect
enterprise-wide Application Security (AppSec) programs across complex,
distributed enterprise settings—embedding SAST, DAST, and SCA into
CI/CD pipelines to enable secure-by-design architecture and reduce
vulnerabilities.
Define
secure architecture patterns and guardrails, integrating AppSec controls
into DevSecOps pipelines to standardize risk management across
distributed engineering teams.
Collaborated
with Customer Security teams to embed security architecture principles
to produce secure project setting.
Experience in Application Security governance frameworks,
aligning with NIST, ISO 27001, and PCI DSS to achieve compliance posture
and audit readiness
Conduct




security risk assessments, vulnerability assessments, and threat
modeling across applications, infrastructure, and networks.
Identify
security gaps and provide risk-based mitigation recommendations.
Perform
periodic security posture reviews and maturity assessments.
Security Architecture & Solution Design
Design
and review secure architecture for applications, cloud, and on-premise
systems.
Ensure
security-by-design principles are embedded in system development and
integration.
Review
technical designs to ensure alignment with security standards and best
practices.
Application & Infrastructure Security
Support
and define application security testing (SAST, DAST, API security
testing).
Support
secure coding practices and review source code for vulnerabilities.
Assess
infrastructure security including servers, databases, networks, and
endpoints.
Cloud & DevSecOps Security
Implement
an

📌 Senior Lead Engineer Joka (India)
🏢 Esyasoft Technologies
📍 India