Hi all ,

we are hiring for the role of Information Security Architect

EXP : 6 -9 years

Location : Bengaluru

Role type : Hybrid

Emp type : C2H ( 1 - YEAR EXTENDABLE )

Description

Information Security Architect

Location: Bangalore, India

Experience: Minimum 6 years in information/product security

Role Overview

Were seeking a senior Information Security Architect to design and implement security strategies throughout the full product lifecycle. This role will lead threat modelling, secure CI/CD initiatives, and act as a champion for product security within our engineering ecosystem.

Key Responsibilities

- Lead security architecture design across our product portfolio, spanning cloud-native and on-premise deployments.
- Conduct threat modeling using SD Elements, STRIDE, PASTA, or similar frameworks to identify and remediate design-level risks.
- Integrate security across DevSecOps processes, including CI/CD automation, SAST/DAST, container scanning, infrastructure-as-code security, and secrets management.
- Define and enforce security patterns, controls, and reference architectures across product teams.
- Perform secure design reviews, architecture risk assessments, and propose mitigation plans.
- Review designs, code, third-party libraries, and cloud configurations for compliance with secure architecture principles.
- Collaborate with product, engineering, QA, and DevOps to embed security early in development cycles.
- Provide subject matter expertise, guidance,



and training on security best practices.
- Stay abreast of emerging threats, vulnerabilities, and tooling for product security.
- Partner with governance, risk, and compliance teams to support audits and ensure alignment with security standards like ISO27001, NIST, and OWASP.

Must-Have Qualifications
- Minimum 6 years experience in information security architecture, product security, or related roles.
- Hands-on experience with product security, including vulnerability analysis, design reviews, and architecture hardening.
- Proven track record securing CI/CD pipelines, including tooling for SAST/DAST, container scanning, and secrets detection.
- Demonstrated experience with threat modeling (especially using SD Elements) and security frameworks (STRIDE, PASTA).
- CISSP certification is mandatory.
- Solid collaboration across cross-functional teams (Dev, Ops, QA).
- Excellent communication skills, with ability to translate technical risks to business stakeholders.

Nice-to-Have Skills
- Cloud security architecture (AWS, Azure, GCP).
- Familiarity with SD Elements security risk management platform.
- Experience with secure infrastructure-as-code (Terraform, CloudFormation).
- Exposure to agile DevSecOps practices and tooling integrations.
- Additional certifications: CCSP, CSA CCSK, CISM, etc.Enable Skills-Based Hiring No

Interested candidates send your cv to : [email protected]

📌 Information Security Architect (Bengaluru)
🏢 Acesoft Labs
📍 Bengaluru