Role & Responsibilities
Provide cybersecurity expertise and guidance across products, platforms, cloud services, and software engineering initiatives.
Drive Security-by-Design and Secure SDLC practices throughout the product lifecycle.
Conduct threat modeling, security assessments, and security architecture/design reviews.
Define and implement Application/Product Security standards and controls.
Integrate security practices into DevSecOps and CI/CD pipelines using SAST, DAST and SCA.
Assess and strengthen AWS/Azure cloud security and cloud-native environments.
Guide container and Kubernetes security for up-to-date application platforms.
Review and secure APIs, microservices, authentication and authorization mechanisms.
Collaborate with Architects, Engineering, DevOps, QA, Product Management and Cybersecurity teams to identify and mitigate security risks.
Provide technical guidance on vulnerabilities, secure coding, remediation and security best practices.
Support penetration testing, vulnerability assessments and security validation activities.
Establish cybersecurity standards,



controls and governance aligned with organizational and industry requirements.

Preferred Candidate Profile
715 years of experience in Cybersecurity, Product Security, Application Security or Security Engineering.
Strong hands-on experience in Application/Product Security and Secure SDLC.
Proven experience with Threat Modeling, preferably STRIDE/PASTA.
Solid understanding of Security Architecture and Security-by-Design.
Hands-on experience with AWS and/or Azure Cloud Security.
Strong knowledge of DevSecOps and CI/CD security integration.
Experience with SAST, DAST and SCA tools and security gates.
Good understanding of Docker, Kubernetes and Container Security.
Strong knowledge of API and Microservices Security.
Valuable understanding of OWASP Top 10 and common application security vulnerabilities.
Robust analytical, problem-solving and communication skills with the ability to work independently as a technical SME.
Security certifications such as CISSP, OSCP, CEH, CSSLP are an advantage.

📌 Cybersecurity Subject Matter Expert Pune
🏢 Sunovaa Tech
📍 Pune