Description

Looking for a Product Security Architect to lead our offensive and defensive security strategies. You will be embedded with engineering teams to ensure our products are resilient against sophisticated attacks. This is a “hands-on” role: you will write security-centric code, conduct deep-dive penetration tests, and automate threat detection within our pipelines. You are not just an auditor; you are a builder who solves security challenges with engineering solutions.

Requirements

Technical Mastery Required

Security Frameworks: OWASP ASVS, SAMM, NIST 800-53, and Cloud Security Alliance (CSA).

Offensive Tools: Burp Suite Qualified, Metasploit, Kali Linux, Nmap, and Postman (for API hacking).

Secure Coding: Deep knowledge of vulnerabilities in Java/.NET and how to prevent them (e.g., SQLi, XSS, CSRF, SSRF).

Cloud Security: Securing Kubernetes (K8s) secrets, IAM Least Privilege, and Cloud Workload Protection (CWPP).

Identity/Auth: Expert-level understanding of JWT, OAuth2, OpenID Connect, and WebAuthn/FIDO2.

Qualifications

Experience:



10+ years in Cybersecurity or Software Engineering, with 4+ years specifically in Product Security or Application Security (AppSec).

Mindset: A “Breaker” mentality balanced with a “Builder’s” empathy; the ability to explain why a vulnerability matters to a product owner.

Certifications: OSCP (Offensive Security Certified Professional)

Communication: Ability to translate complex exploitation paths into transparent risk assessments for non-technical leadership.

Job responsibilities

Key Responsibilities

Secure Architecture & Threat Modeling

Threat Modeling: Lead structured threat modeling sessions (using STRIDE or PASTA) during the design phase to identify architectural flaws before a single line of code is written.

Architecture Reviews: Conduct deep-dive security reviews of system designs, focusing on authentication (OIDC/SAML), authorization (RBAC/ABAC), and data isolation.

Security Scaffolding: Build and maintain

📌 Product Security Architect4 (Bengaluru)
🏢 GlobalLogic
📍 Bengaluru